last executing test programs: 7.036965544s ago: executing program 0 (id=15611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 6.8809808s ago: executing program 0 (id=15616): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) 6.653664164s ago: executing program 0 (id=15622): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090025bd7000000000000400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x2, @empty}]}, &(0x7f0000000180)=0x10) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x7, 0xfa, [@remote]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 6.203202411s ago: executing program 0 (id=15626): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 5.947475333s ago: executing program 0 (id=15629): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./cgroup/cgroup.procs/../file0\x00'}, 0x18) 5.792499741s ago: executing program 0 (id=15633): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x5}}}}]}]}, 0x68}}, 0x0) 3.283030089s ago: executing program 4 (id=15648): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000040)=0x2c5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a00000001900010000000000000000001c14640000fe0000010000000084001900"], 0xa0}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x48}}, 0x2004) read(r2, &(0x7f0000001480)=""/4096, 0x38) 2.617518155s ago: executing program 4 (id=15657): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x118, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x200, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000003200200f250e2d65b66ad322b38686308e388ea4dac0ca0bbb9bda2246264a951ca4174c50200"], 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000019c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x28b}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x2, 0x10004003, 0x7, 0x0, 0x7}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, 0x29, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) 2.352406193s ago: executing program 2 (id=15659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000d10ffc), 0x3) read(r1, &(0x7f0000000080)=""/22, 0x16) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000050000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a4000000070a0102000000568f62800005000005720000001400028008000140000000030800014000000009100001800b000100736f636b65740000100001800c0001070061796c6f616400100001800a00010071756f74610000000900020073797a31000000000c000580080001000b40000000040c00034000000000000000010b00020073797a3100"/158], 0xa4}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) 2.276660684s ago: executing program 4 (id=15661): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000040)={0x18, 0x0, {0x2, @usage=0x2, 0x0, 0x6, 0x4, 0x2d6b, 0xf8, 0x0, 0x8, @usage=0x4, 0x5, 0x101, [0x3, 0x3, 0x8, 0x8, 0x1, 0x9]}, {0x7, @usage=0x7, 0x0, 0xb9, 0xb, 0x7fffffff, 0x0, 0x9bd, 0xa, @struct={0x80000, 0x7f}, 0x6, 0x7ff, [0xb6, 0x0, 0x7, 0x2, 0x8]}, {0x3, @usage=0x3, 0x0, 0xffffffff00000000, 0x8, 0x7, 0x7, 0x401, 0x77, @struct={0x1, 0x8}, 0xfff, 0x6, [0x4000000, 0x0, 0x9, 0x6, 0x3, 0xfff]}, {0x6, 0x3, 0x3}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000440)={r3, 0x7}) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000840)={0x27, 0x0}, &(0x7f00000008c0)=0x60) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000900)={{r4}, "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"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001900)={r2, "86d85710a76204b414be09e8967f9b2c"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002900)={r6, 0x3, 0x5, 0x1}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000004440)={{r1, &(0x7f0000002d00)='\x00', 0x2c8801, &(0x7f0000002d40)={@_ha_fsid, {0x3a, 0x8, 0x7, 0x9}}, 0x4, &(0x7f0000002d80), &(0x7f0000002dc0)=0x5}, 0x8, &(0x7f0000004340)=[{0x3, 0x4, &(0x7f0000002e00)='.\x00', &(0x7f0000002e40)="aaaac5ee09d808318012c4a8a96c5571734a9dcbe7e1cc7309dc159d91bbada4720620f3948e555009a4dd20167f0b383ae9932edfde19abfdd0f063fca2d5d02cc0c68afa561562a41f9fe49c6ed5280a9cee7ee55409b7b73fb9d54d2f798befd562ece29ec62019b0e7a52065e9bb35ff6195dc95555462e2", 0x7a, 0x2}, {0x3, 0x4, &(0x7f0000002ec0)='\x00', &(0x7f0000002f00)="7dcb2a6c1df66064b5291e57ae06c0e9f6150bf6e51dd64d11abfe41b939c719f1b87e1c3a4ca17288e0c7e77c878a2a346a14841bd7f733766aa8267c18b22d0432adf0a20d7117b4be32b59e5412a1ea88bed30c64cd6aede782e82124c871fe530231a92c1573a417ab14422e26c6eab4a94a054317e98d0b2e1863f67f61c5c0744cc4d62f001ca033d780a421b3a2eb833433cacc1e6b30c590d1e38e6ed0b2ec8c1176faf61536672123089ef69ee6a37716f720a313", 0xb9, 0x20}, {0x2, 0x2, &(0x7f0000002fc0)='\x00', &(0x7f0000003000)="49ba562ef3912502841dc3ee7fdb7a2ebd4e6b05695d6447779d61a77c62565551eb12f05a86627e4e4f1213d55a19", 0x2f, 0x20}, {0x1, 0x7ff, &(0x7f0000003040)='\x00', &(0x7f0000003080)="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", 0x1000, 0x18}, {0x1, 0x4, &(0x7f0000004080)='\x00', &(0x7f00000040c0)="7a40b363fbd1a18ceaee469c799d11a9d3919003d16b081a1d111c1d5de3608fbb656a5ac3fce1b93a48c3499f1bc9398b04e5e3b5df833690bfdcd92fcfb92478e6c5695dce1a653fbb01a93944449cea9c3b7932a79c0760f85cd68b46750baa95d981ab5112419b71fb9590f47991df0b7f4dd9e0b135a2f99f1319a3d5b8a3de8dc505f1a813cf5bb3ef", 0x8c, 0x48}, {0x2, 0x4, &(0x7f0000004180)='\x00', &(0x7f00000041c0)="019c1756f5ae6d0a69186a689004dcce0f60c2641f13cdbbc3d27f51a3859730086f204d2b4bbd2c33ab", 0x2a, 0x18}, {0x2, 0x2, &(0x7f0000004200)='\x00', &(0x7f0000004240)="4c47edbd64dd6f10086f0153dc63afe594b8a5c11a84a1ed5f1cb7c6f9b90ec7315ae01f3a7979141b149f7f599883aaf75c0fd0b97c677826283f0fd6e529db27a5c7002a1e1dcfdca3986ebb41308358a119c949", 0x55, 0x32}, {0xf91aabb66dcaf078, 0xd, &(0x7f00000042c0)='\x00', &(0x7f0000004300)="12e6e0292be569d343090cfbd11ed907323be4d36ca8205dbf496b6b223e5f526f08ba1e0d126c569fa7f5f80d36f7", 0x2f}]}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xb}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2f4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008000) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000045c0)=0x2) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000004600)={0x8, 'veth1_to_hsr\x00', {'netpci0\x00'}, 0x9}) (async) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000004700)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x20, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x48080) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000004740)={0x0, 0xfff, 0x4cf}, &(0x7f0000004780)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000047c0)={r8, 0xfbff, 0x200, 0x8e, 0x6, 0x401}, &(0x7f0000004800)=0x14) (async) splice(r4, &(0x7f0000004840)=0x2, r4, &(0x7f0000004880)=0x3ff, 0xca, 0xe) (async) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r10, &(0x7f0000004c80)={&(0x7f00000048c0)={0x27, r5, 0x0, 0x1, 0xd, 0x4, "eedd02f23aef919aeaace3f527803abd477b0bd540da5e3e65ef62aa4783607b070fb11b2d6c88af3b0099e7b4a8c77b5edfa613d6d9b5589529dae957862d", 0x14}, 0x60, &(0x7f0000004bc0)=[{&(0x7f0000004940)="97abbbb9b23a4817aceaec372fd9a1e3487c7d4c87ec700316aa31605662cd234dca8ffc22432f18f60e67560e34992c6c718f1de9fc9f8ef521687ad5b13b3d5c8270303bf2755c2479eee564057be52d189bbd6fd00269e987d487c18f62555048c0d9450adb9bafa5c94fbe2365e3bc618e1543c93155e6d67383179e5aa20279f7c7e5f806fa0f4f2d8f7dc9c9af9ac31efa3bcbb0aebb52f7b96bc79260fa498d002e", 0xa5}, {&(0x7f0000004a00)="292dd4c2311652d808c581b3ba18762416836d54dce76bd1232f848a3db348cad4d0173a4330479214ce8b48884dfd403c75712bef1e9558f5b053a0965efa08470d521ab4108a2f38135dbd691448e6f6c717fc9dbddcacc7450cf25b92ab59a03916baabb06115129a2f644436d79ddfb9466c798bf5d9869650e2774b5fb07c", 0x81}, {&(0x7f0000004ac0)="0a9879ccc20085a7be8da5c15dd1042cab6cd2ca0de88bd227f7facaf4103e6d45179900635d8fe85ecefc71e93ef1028d8e3f2f311ebf67f3f96e987e353fb7fc4c5982edf05b334fe09971dcdc74ee120567fa4a35838a8ab2a183e1bd13b60213ca5aba919b20f318fdd977da74e79cb37ed78fcb7ce3f8933aeba8e8a5cd1847d4ab0fedae6eb0e449fb076fdffd55f6f9ac34e224777767ddf0d85030a08c408a925ae25a5d8325554158bc57e9f6bcd39630ae9c84f9b60ea5fd9f65230077b1c07b4fd3a7d014edc8c7b715f60ec7cfe635b900bb3a27ca", 0xdb}], 0x3, &(0x7f0000004c00)={0x50, 0x107, 0x9, "facf5d85e54832d400668ea589954c5876e04f0c18783ef8ab5cdb363c5ce61258f129668d1d05a13cdba4802d758a7ce48664a07c9a132a9a5686562951"}, 0x50, 0x4004004}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000004f40)={&(0x7f0000004cc0)="e6a95bd67620dc2f7187acaf6b475463fd8442b095961aca70a64c7ced7d777ff88f7f43328322ac31d36cda526c86294097a44937e8673e5126dc2ac1d6136975215265c0d8ed1898abf02a89ecb4fafc23737c6f665c7b9d25f4d0c6f3788c80f8a0d1bf9d21bad9b60ec3f86741a8bcc4c64cd3473ee7e28c0b51a9405689206591854bd5b2c06c6d594fa9d84fa964c9f8f459d0ea93d8ab0a085001abfa9516f69c7947", &(0x7f0000004d80)=""/160, &(0x7f0000004e40)="6cbbd3b14be183419cbe3e4ccb5fb3b19d7cae182759b5606c1731ae20ba572195e0c4dd90498de969e7c9f1342bedb086a8b7ec31ae9b701f564d66d3b941d248e6f8cf4b9743b210c75732321d6f5d2e07257fef83a11a1c440e2702cfcbda835b78fa43c563a243efacd108f81efd91e293b4147976448ba02f939733a7d124ab0b1c4056618370deeff5763fbcf7ad7a6481f335a7e3b67dff013eb5836c121fa410da5e6044684d672c48cacaaf927ce622937b", &(0x7f0000004f00)="6cb3b6fd8a164f0416d411fd5dd415bfd2a388b524ec914d821ae22c9e81da03d65b09419d1da6729d585362973f066ce8883197", 0x2, r7}, 0x38) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000004f80)={'\x00', @multicast}) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000004fc0)="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") (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x0, 0x4) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) (async) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f00000050c0)=0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000005100)={@in6={{0xa, 0x4e21, 0x8001, @local, 0x7}}, 0x0, 0x0, 0x19, 0x0, "7be4473d8cf26a10cd2a06168d041a98228d4c32f46f08b9b10415423bcea0a56e431791ff0efc1565d90d6f3da7dca29e6dcece186901df060aae7a5b42db8d795374f998638e25a970b00000cc8c13"}, 0xd8) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000005200)={r9, @in6={{0xa, 0x4e24, 0xffffffff, @local, 0xc}}, 0x4, 0x7, 0x8b3, 0x4, 0x4, 0x8, 0x6}, 0x9c) (async, rerun: 32) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f00000052c0), 0x4) (async, rerun: 32) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000005300), 0x100, 0x0) ioctl$SIOCGIFHWADDR(r12, 0x8927, &(0x7f0000005340)={'veth0_to_bridge\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x4d000}, 0xc, &(0x7f0000005440)={&(0x7f0000005400)={0x28, 0x0, 0x601, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x56}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) (rerun: 32) 2.148901519s ago: executing program 2 (id=15662): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x7fffffff}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="6e2e80cf70f09b40739bafdab1d4b1e0b0f143efd7ebd10cc3071b4e5588b020b2acc5f9aaf14921f8280ae12e4cf6cddbed04fc25dfd1ac291ce3e246e1dd042c220fa8c7fe56d50a9b0622b7f55aaeac3b0db60650667ec5f6faeda2a142d3fd1637425d3025b150cc253d3b21912a91e728cb2ab800a20cc5d3187a5f52bcf565d2bb935ca0e4dcd050dd12cdb3d21801ba1ac509afe77bfb984f3dfc929da4e1d3f6d7197856036d6aa22c7c7642", &(0x7f00000000c0)=""/167}, 0x6a) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) 2.032151899s ago: executing program 4 (id=15664): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff", 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x110, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xfffffbff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2956260b}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x10}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8}}]}, 0x110}, 0x1, 0x0, 0x0, 0x50}, 0xc0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.028862515s ago: executing program 2 (id=15665): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18c, 0x203f, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x4e}, @nested={0x80, 0xc2, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @generic="4394ca7cb396cab8a33f9bb0d28849876b1dc0150b1823faf196e61a941914a587a5d7b57b647930c4ca07d51266ff80508d1e5a1dcee97234b95a2dc584450dddd0724e06110e566063241fdd5c74bbfb8a6fcdef3e67c84a2551e0999ef04e7a00053c4bba1933be1a3fec40e890de626c8b60"]}, @generic="2ea918b5faad09fec16358c0bffe99f856d762346440f05ebbe188f056be89d776eca1855493ff572d1f81da8fceae867ec078737f43884aafc0d686321f62ee406980b07e69e02fd479060b599453a01d2e9f6c471817c3e94690903a711f8dcda200d92175a13d2b4aac8aceb040c43df39737c0a8f583af4d6788ea6cab9579cc7911d3448d886f32c451df17284d321babfa941d65e36299ed743153604d8af153c1ad0aac5b6fc13eb7480376887f5681fbcd20c0b976d550581feca194ac7dc4741a373d1a08d5dc7c94c6930cc9795b4f3f894eb9f1f2520ef8a669f17d7ddaa9cb50495718afd78e51ac48bcf7f3"]}, 0x18c}, 0x1, 0x0, 0x0, 0x48815}, 0xe48eb901ae9ab7e7) 1.98239407s ago: executing program 2 (id=15666): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.791047701s ago: executing program 3 (id=15669): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x10002, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/93, 0x5d) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000f40)={0x4c, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x2000c040) 1.632357258s ago: executing program 1 (id=15671): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @remote}}, @sadb_x_sec_ctx={0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x1, @mcast2}}]}, 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500", @ANYRESDEC=r1], 0x108}}, 0x24040800) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x3ff, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000004040)="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", 0x3f1}], 0x1}}], 0x1, 0x200040c4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) 1.080274983s ago: executing program 3 (id=15672): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)=""/238, 0xee}, {&(0x7f0000000280)=""/249, 0xf9}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x180, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2}]}, @mark={0xc, 0x15, {0x0, 0x37}}]}, 0x180}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x180, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2}]}, @mark={0xc, 0x15, {0x0, 0x37}}]}, 0x180}}, 0x0) 1.079743471s ago: executing program 1 (id=15673): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@fwd={0x7}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @enum64={0x6, 0x4, 0x0, 0x13, 0x0, 0x8, [{0xe, 0x0, 0x1}, {0xd, 0x2, 0x7ff}, {0x3, 0xfff}, {0x10, 0x10001, 0xc}]}]}, {0x0, [0x30, 0x30, 0x61, 0x5f]}}, &(0x7f0000001880)=""/11, 0x72, 0xb, 0x0, 0x7f, 0x10000}, 0x28) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743c, 0x16) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) close(r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x90}, 0x1, 0x7}, 0x0) (async) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000240)=0x2c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x84, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x48810) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x30, r7, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/132, 0x84}, {&(0x7f00000007c0)=""/4105, 0x1009}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f00000001c0)=""/88, 0x58}], 0x4}, 0x82776f9104e921a0) 1.05492413s ago: executing program 4 (id=15674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a80180004801400040006"], 0x38}}, 0x2400c090) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r6, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r7, 0x891a, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x6, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x4, 0x70bd28, 0x4, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x65}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 1.028477817s ago: executing program 3 (id=15675): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x29, 0x5, 0xc6, 0x215, 0x7, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x9, 0x7fffffff}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x24, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x2}, [@NDA_IFINDEX={0x8, 0x8, r3}]}, 0x24}}, 0x0) 955.893805ms ago: executing program 2 (id=15676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffc88, 0x140, 0x0, 0x0) 892.453141ms ago: executing program 1 (id=15677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000050000840000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 853.15569ms ago: executing program 1 (id=15678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9c638bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7bfa0f000000000000c346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf701627825be61e036c9eae11b300b3ec832a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f60d8000000053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563ebbe1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270106181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e687098295d6a66bff091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea264fcfb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac000000000000000000000072b043a07864ef74028bd9ac8c169da129bf1f6776d2e5884cebc50666d334417ddafcc381b0cfbd65d6036d3a15bc680f424efff16edc05758d5be24f42b8dbe920e7823cb0ce62afb1246dc9d4c6b56e391c30e7ef3c1b9b3a9cb202dac5a2eb2516ee891b3e6f23fa95a2d86fd65c02476321b830c4ae1c0a414420dbd16ca220"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@loopback, @private=0xa010102, 0x11, 0x9}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}, 0x6e6bb2}, [@migrate={0xe8, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x80, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)=0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000003c0)=r5) 796.540871ms ago: executing program 3 (id=15679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) 608.423769ms ago: executing program 3 (id=15680): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x75}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 607.697499ms ago: executing program 1 (id=15681): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = accept4$llc(r1, 0x0, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x41000) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x20000800) socketpair$unix(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f40)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x9, 0x3, 0x1, 0x7, 0xfffffffd}}, {0x4}}]}]}, 0x70}, 0x1, 0x41020000, 0x0, 0x880}, 0x8010) 508.893731ms ago: executing program 3 (id=15682): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4008804) 503.576439ms ago: executing program 4 (id=15683): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff", 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x110, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xfffffbff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2956260b}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x10}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8}}]}, 0x110}, 0x1, 0x0, 0x0, 0x50}, 0xc0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 443.744427ms ago: executing program 1 (id=15684): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84}], 0x10}}], 0x2, 0x40000050) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x9, 0x7, 0xfffffff9, 0x9, 0xffffff56, 0x8, 0x2, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1b4, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xb}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x7}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x42}}, @filter_kind_options=@f_basic={{0xa}, {0x15c, 0x2, [@TCA_BASIC_ACT={0x158, 0x3, [@m_sample={0x68, 0x1e, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xec, 0x0, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x79, 0x6, "2dbf268a304e872a0d7f589c8901efee8571a53c4f0062991873d363eeca75f7594e303fa6758fe5d09d4f9ffd072918848212ec1896728111b3c61d1de320181a72e0f47ddfe150f87d3d5d6ddc89258e07ea93abbbaa8b9538526f3018c8a1b0e044cee5833db84e522dd97d547504650f4a6186"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x5, 0x4}, {0x0, 0x2}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x2, 0x5, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xc58, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x9, 0x9, 0x4, 0x7, 0x10000001}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x6, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x2, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0x7, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x4, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 0s ago: executing program 2 (id=15685): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 6'. [ 1227.775581][T19843] netlink: ct family unspecified [ 1228.063181][T19867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14081'. [ 1228.110683][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14083'. [ 1228.648045][T19886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14088'. [ 1228.657789][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14088'. [ 1228.692689][T15216] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.692716][T19886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14088'. [ 1228.719616][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14088'. [ 1228.733622][T15216] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.743120][T15216] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.759422][T15216] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.759794][T19900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14092'. [ 1228.780711][T19900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14092'. [ 1228.938967][T19861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1229.040447][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14098'. [ 1229.168153][T19918] xt_CT: No such helper "netbios-ns" [ 1229.278689][T19939] wireguard0: entered promiscuous mode [ 1229.284268][T19939] wireguard0: entered allmulticast mode [ 1229.309391][T19939] team0: Port device wireguard0 added [ 1229.620080][T19964] syzkaller0: entered promiscuous mode [ 1229.626520][T19964] syzkaller0: entered allmulticast mode [ 1229.644038][T19964] nbd: must specify a size in bytes for the device [ 1230.030955][T19992] netlink: 'syz.3.14120': attribute type 4 has an invalid length. [ 1230.051992][T19992] .`: renamed from bond0 (while UP) [ 1230.080228][T19994] vcan0: tx address claim with different name [ 1230.096469][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 1230.222137][T20007] netlink: 'syz.1.14127': attribute type 4 has an invalid length. [ 1230.295807][T20015] netlink: 'syz.3.14128': attribute type 10 has an invalid length. [ 1230.319854][T20015] team0: Device vxcan1 is of different type [ 1230.408092][ T11] block nbd1: Possible stuck request ffff888026e40000: control (read@0,1024B). Runtime 210 seconds [ 1230.419420][ T2141] block nbd3: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 210 seconds [ 1230.430762][ T2141] block nbd3: Possible stuck request ffff888026f00200: control (read@1024,1024B). Runtime 210 seconds [ 1230.444170][ T11] block nbd1: Possible stuck request ffff888026e40200: control (read@1024,1024B). Runtime 210 seconds [ 1230.456654][ T2141] block nbd3: Possible stuck request ffff888026f00400: control (read@2048,1024B). Runtime 210 seconds [ 1230.468128][ T11] block nbd1: Possible stuck request ffff888026e40400: control (read@2048,1024B). Runtime 210 seconds [ 1230.479315][ T2141] block nbd3: Possible stuck request ffff888026f00600: control (read@3072,1024B). Runtime 210 seconds [ 1230.487178][T20025] macsec1: entered promiscuous mode [ 1230.494106][ T11] block nbd1: Possible stuck request ffff888026e40600: control (read@3072,1024B). Runtime 210 seconds [ 1230.640454][T20037] netlink: 'syz.2.14133': attribute type 4 has an invalid length. [ 1230.700351][T20039] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1230.783659][T20043] netlink: 'syz.1.14136': attribute type 10 has an invalid length. [ 1230.792901][T20043] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1230.820862][T20044] netlink: 'syz.1.14136': attribute type 10 has an invalid length. [ 1230.846741][T20044] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1231.137749][T20067] netlink: 'syz.2.14142': attribute type 1 has an invalid length. [ 1231.143897][T20075] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1231.220886][T20073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1231.243749][T20084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1231.628953][T20111] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1231.770308][T20115] team0: Port device team_slave_0 removed [ 1232.165490][T20154] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1232.556711][T20184] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1232.966651][T20216] validate_nla: 4 callbacks suppressed [ 1232.966672][T20216] netlink: 'syz.0.14198': attribute type 1 has an invalid length. [ 1233.104050][T20218] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1233.159141][T20218] bond6: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 1233.173414][T20218] bond6: (slave vxcan1): making interface the new active one [ 1233.182118][T20218] bond6: (slave vxcan1): Enslaving as an active interface with an up link [ 1233.736376][T20254] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1233.913542][T20263] __nla_validate_parse: 32 callbacks suppressed [ 1233.913561][T20263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14211'. [ 1234.191925][T20272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14215'. [ 1234.201795][T20270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14213'. [ 1235.120994][T20317] ip6gre1: entered promiscuous mode [ 1235.167429][T20322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1235.185574][T20322] netlink: 'syz.1.14234': attribute type 1 has an invalid length. [ 1235.291183][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14236'. [ 1235.307796][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14236'. [ 1235.330300][T20330] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1235.523480][T20347] FAULT_INJECTION: forcing a failure. [ 1235.523480][T20347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.540298][T20344] netlink: 'syz.4.14240': attribute type 1 has an invalid length. [ 1235.560857][T20347] CPU: 0 UID: 0 PID: 20347 Comm: syz.3.14241 Not tainted syzkaller #0 PREEMPT(full) [ 1235.560883][T20347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1235.560894][T20347] Call Trace: [ 1235.560902][T20347] [ 1235.560910][T20347] dump_stack_lvl+0xe8/0x150 [ 1235.560941][T20347] should_fail_ex+0x412/0x560 [ 1235.560971][T20347] _copy_from_user+0x2d/0xb0 [ 1235.560993][T20347] do_ip_getsockopt+0x292/0x1d40 [ 1235.561029][T20347] ? __lock_acquire+0x630/0x2cf0 [ 1235.561055][T20347] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 1235.561085][T20347] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1235.561109][T20347] ? kstrtouint+0x6e/0xe0 [ 1235.561138][T20347] ? get_pid_task+0x20/0x1f0 [ 1235.561161][T20347] ? __lock_acquire+0x6b5/0x2cf0 [ 1235.561201][T20347] ? aa_sk_perm+0x6d5/0x900 [ 1235.561228][T20347] ip_getsockopt+0xbb/0x230 [ 1235.561257][T20347] ? __pfx_ip_getsockopt+0x10/0x10 [ 1235.561284][T20347] ? sock_common_getsockopt+0x2d/0xb0 [ 1235.561309][T20347] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1235.561338][T20347] do_sock_getsockopt+0x2d3/0x3f0 [ 1235.561365][T20347] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1235.561386][T20347] ? __fget_files+0x3a0/0x420 [ 1235.561411][T20347] ? __fget_files+0x2a/0x420 [ 1235.561441][T20347] __x64_sys_getsockopt+0x1a4/0x240 [ 1235.561469][T20347] do_syscall_64+0x14d/0xf80 [ 1235.561489][T20347] ? trace_irq_disable+0x3b/0x150 [ 1235.561504][T20347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.561520][T20347] ? clear_bhb_loop+0x40/0x90 [ 1235.561542][T20347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.561558][T20347] RIP: 0033:0x7f950a79c819 [ 1235.561577][T20347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.561592][T20347] RSP: 002b:00007f950b63e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1235.561612][T20347] RAX: ffffffffffffffda RBX: 00007f950aa15fa0 RCX: 00007f950a79c819 [ 1235.561625][T20347] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000005 [ 1235.561636][T20347] RBP: 00007f950b63e090 R08: 0000200000000340 R09: 0000000000000000 [ 1235.561647][T20347] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1235.561658][T20347] R13: 00007f950aa16038 R14: 00007f950aa15fa0 R15: 00007ffc37359ed8 [ 1235.561688][T20347] [ 1236.013902][T20355] netlink: 'syz.4.14244': attribute type 12 has an invalid length. [ 1236.041517][T20356] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1236.075471][T20355] netlink: 160 bytes leftover after parsing attributes in process `syz.4.14244'. [ 1236.130091][T20360] vcan0: tx address claim with different name [ 1236.205526][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14248'. [ 1236.344550][T20372] x_tables: duplicate underflow at hook 1 [ 1236.355761][T20372] IPVS: length: 24 != 49176 [ 1236.607449][T20394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1236.650976][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14260'. [ 1236.816766][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14265'. [ 1236.971813][T20415] FAULT_INJECTION: forcing a failure. [ 1236.971813][T20415] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.985076][T20415] CPU: 0 UID: 0 PID: 20415 Comm: syz.1.14267 Not tainted syzkaller #0 PREEMPT(full) [ 1236.985101][T20415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1236.985113][T20415] Call Trace: [ 1236.985121][T20415] [ 1236.985130][T20415] dump_stack_lvl+0xe8/0x150 [ 1236.985162][T20415] should_fail_ex+0x412/0x560 [ 1236.985194][T20415] should_failslab+0xa8/0x100 [ 1236.985217][T20415] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1236.985237][T20415] kmem_cache_alloc_noprof+0x87/0x650 [ 1236.985255][T20415] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1236.985275][T20415] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1236.985300][T20415] radix_tree_node_alloc+0x7e/0x3a0 [ 1236.985327][T20415] idr_get_free+0x2b3/0xa70 [ 1236.985359][T20415] idr_alloc_u32+0x18d/0x320 [ 1236.985387][T20415] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1236.985413][T20415] ? do_raw_spin_lock+0x12b/0x2f0 [ 1236.985441][T20415] idr_alloc_cyclic+0x9b/0x1b0 [ 1236.985470][T20415] bpf_link_prime+0x6b/0x220 [ 1236.985499][T20415] bpf_xdp_link_attach+0x268/0x9a0 [ 1236.985521][T20415] ? __lock_acquire+0x6b5/0x2cf0 [ 1236.985553][T20415] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1236.985595][T20415] ? __fget_files+0x3a0/0x420 [ 1236.985621][T20415] ? __fget_files+0x2a/0x420 [ 1236.985649][T20415] ? attach_type_to_prog_type+0x298/0x490 [ 1236.985671][T20415] ? bpf_prog_attach_check_attach_type+0x39c/0x540 [ 1236.985696][T20415] link_create+0x4d8/0x850 [ 1236.985722][T20415] __sys_bpf+0x468/0x950 [ 1236.985757][T20415] ? __pfx___sys_bpf+0x10/0x10 [ 1236.985802][T20415] ? ksys_write+0x242/0x270 [ 1236.985828][T20415] ? __pfx_ksys_write+0x10/0x10 [ 1236.985852][T20415] __x64_sys_bpf+0x7c/0x90 [ 1236.985879][T20415] do_syscall_64+0x14d/0xf80 [ 1236.985900][T20415] ? trace_irq_disable+0x3b/0x150 [ 1236.985916][T20415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.985935][T20415] ? clear_bhb_loop+0x40/0x90 [ 1236.985965][T20415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.985983][T20415] RIP: 0033:0x7f911d79c819 [ 1236.986002][T20415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.986017][T20415] RSP: 002b:00007f911e6ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1236.986037][T20415] RAX: ffffffffffffffda RBX: 00007f911da15fa0 RCX: 00007f911d79c819 [ 1236.986051][T20415] RDX: 000000000000001c RSI: 0000200000000300 RDI: 000000000000001c [ 1236.986063][T20415] RBP: 00007f911e6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.986075][T20415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.986086][T20415] R13: 00007f911da16038 R14: 00007f911da15fa0 R15: 00007ffe2dc35288 [ 1236.986116][T20415] [ 1237.485261][T20433] FAULT_INJECTION: forcing a failure. [ 1237.485261][T20433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.523998][T20433] CPU: 1 UID: 0 PID: 20433 Comm: syz.1.14272 Not tainted syzkaller #0 PREEMPT(full) [ 1237.524026][T20433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1237.524039][T20433] Call Trace: [ 1237.524047][T20433] [ 1237.524055][T20433] dump_stack_lvl+0xe8/0x150 [ 1237.524093][T20433] should_fail_ex+0x412/0x560 [ 1237.524125][T20433] _copy_to_user+0x31/0xb0 [ 1237.524149][T20433] simple_read_from_buffer+0xe1/0x170 [ 1237.524181][T20433] proc_fail_nth_read+0x1bb/0x230 [ 1237.524211][T20433] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.524240][T20433] ? rw_verify_area+0x2a6/0x4d0 [ 1237.524258][T20433] ? nf_getsockopt+0x288/0x290 [ 1237.524280][T20433] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.524307][T20433] vfs_read+0x20c/0xa70 [ 1237.524326][T20433] ? fdget_pos+0x246/0x320 [ 1237.524348][T20433] ? __pfx___mutex_lock+0x10/0x10 [ 1237.524373][T20433] ? __pfx_vfs_read+0x10/0x10 [ 1237.524394][T20433] ? __fget_files+0x2a/0x420 [ 1237.524425][T20433] ? __fget_files+0x3a0/0x420 [ 1237.524451][T20433] ? __fget_files+0x2a/0x420 [ 1237.524485][T20433] ksys_read+0x150/0x270 [ 1237.524508][T20433] ? __pfx_ksys_read+0x10/0x10 [ 1237.524526][T20433] ? fput+0xa0/0xd0 [ 1237.524561][T20433] do_syscall_64+0x14d/0xf80 [ 1237.524582][T20433] ? trace_irq_disable+0x3b/0x150 [ 1237.524598][T20433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.524617][T20433] ? clear_bhb_loop+0x40/0x90 [ 1237.524640][T20433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.524659][T20433] RIP: 0033:0x7f911d75d04e [ 1237.524676][T20433] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1237.524693][T20433] RSP: 002b:00007f911e6cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1237.524712][T20433] RAX: ffffffffffffffda RBX: 00007f911e6ce6c0 RCX: 00007f911d75d04e [ 1237.524725][T20433] RDX: 000000000000000f RSI: 00007f911e6ce0a0 RDI: 0000000000000006 [ 1237.524737][T20433] RBP: 00007f911e6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.524747][T20433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.524757][T20433] R13: 00007f911da16038 R14: 00007f911da15fa0 R15: 00007ffe2dc35288 [ 1237.524787][T20433] [ 1237.812196][T20438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14274'. [ 1238.733034][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1238.745497][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1238.753921][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1238.869573][T20523] netlink: 'syz.1.14300': attribute type 1 has an invalid length. [ 1238.964658][T20529] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1239.003809][T20532] __nla_validate_parse: 4 callbacks suppressed [ 1239.003830][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14302'. [ 1239.026849][T20529] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1239.241946][T20536] bond7: (slave gretap2): making interface the new active one [ 1239.263329][T20536] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 1239.281673][T20537] macvlan2: entered promiscuous mode [ 1239.288058][T20537] macvlan2: entered allmulticast mode [ 1239.294381][T20537] bond7: entered promiscuous mode [ 1239.300835][T20537] gretap2: entered promiscuous mode [ 1239.308268][T20537] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1239.321704][T20537] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 1239.335098][T20537] bond7: left promiscuous mode [ 1239.340244][T20537] gretap2: left promiscuous mode [ 1239.545548][T20562] netlink: 7 bytes leftover after parsing attributes in process `syz.2.14312'. [ 1239.559318][T20564] netlink: 'syz.1.14313': attribute type 1 has an invalid length. [ 1239.612733][T20561] bond0: option mode: invalid value (133) [ 1239.623256][T20561] bond0 (unregistering): Released all slaves [ 1239.733002][T20569] syzkaller0: entered promiscuous mode [ 1239.741965][T20569] syzkaller0: entered allmulticast mode [ 1239.781496][T20582] ip6t_srh: unknown srh invflags 4000 [ 1239.787799][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14319'. [ 1239.806011][T20584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14320'. [ 1239.874977][T20588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14322'. [ 1240.572007][T20604] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1240.857744][T20619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14332'. [ 1240.875194][T20616] vcan0: tx address claim with different name [ 1241.007974][T20629] wireguard1: entered promiscuous mode [ 1241.014227][T20629] wireguard1: entered allmulticast mode [ 1241.025038][T20629] team0: Device wireguard1 is of different type [ 1241.052965][T20627] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14335'. [ 1241.400851][T20660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14347'. [ 1241.481261][T20658] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14348'. [ 1241.502980][T20666] netlink: 'syz.3.14351': attribute type 3 has an invalid length. [ 1241.506348][T20658] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14348'. [ 1241.809863][T20686] x_tables: unsorted underflow at hook 4 [ 1241.817343][T20690] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1242.008592][T20704] FAULT_INJECTION: forcing a failure. [ 1242.008592][T20704] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.053480][T20704] CPU: 1 UID: 0 PID: 20704 Comm: syz.1.14363 Not tainted syzkaller #0 PREEMPT(full) [ 1242.053506][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1242.053518][T20704] Call Trace: [ 1242.053526][T20704] [ 1242.053535][T20704] dump_stack_lvl+0xe8/0x150 [ 1242.053567][T20704] should_fail_ex+0x412/0x560 [ 1242.053599][T20704] should_failslab+0xa8/0x100 [ 1242.053625][T20704] __kmalloc_noprof+0xe8/0x760 [ 1242.053654][T20704] ? nft_trans_alloc+0x22/0x2a0 [ 1242.053677][T20704] ? nft_pernet+0x23/0x240 [ 1242.053703][T20704] nft_trans_alloc+0x22/0x2a0 [ 1242.053730][T20704] nf_tables_newtable+0x116d/0x1910 [ 1242.053771][T20704] nfnetlink_rcv+0x1240/0x27b0 [ 1242.053828][T20704] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1242.053870][T20704] ? ref_tracker_free+0x693/0x840 [ 1242.053925][T20704] ? __netlink_deliver_tap+0x807/0x850 [ 1242.053953][T20704] ? netlink_deliver_tap+0x2e/0x1b0 [ 1242.053998][T20704] netlink_unicast+0x80f/0x9b0 [ 1242.054033][T20704] ? __pfx_netlink_unicast+0x10/0x10 [ 1242.054060][T20704] ? netlink_sendmsg+0x650/0xb40 [ 1242.054076][T20704] ? skb_put+0x11b/0x210 [ 1242.054100][T20704] netlink_sendmsg+0x813/0xb40 [ 1242.054128][T20704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.054150][T20704] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1242.054183][T20704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1242.054209][T20704] ____sys_sendmsg+0x972/0x9f0 [ 1242.054241][T20704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.054272][T20704] ? import_iovec+0x73/0xa0 [ 1242.054296][T20704] ___sys_sendmsg+0x2a5/0x360 [ 1242.054325][T20704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.054382][T20704] ? __fget_files+0x2a/0x420 [ 1242.054408][T20704] ? __fget_files+0x3a0/0x420 [ 1242.054445][T20704] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1242.054470][T20704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1242.054500][T20704] ? __pfx_ksys_write+0x10/0x10 [ 1242.054532][T20704] do_syscall_64+0x14d/0xf80 [ 1242.054553][T20704] ? trace_irq_disable+0x3b/0x150 [ 1242.054570][T20704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.054589][T20704] ? clear_bhb_loop+0x40/0x90 [ 1242.054612][T20704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.054631][T20704] RIP: 0033:0x7f911d79c819 [ 1242.054655][T20704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.054671][T20704] RSP: 002b:00007f911e6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1242.054691][T20704] RAX: ffffffffffffffda RBX: 00007f911da15fa0 RCX: 00007f911d79c819 [ 1242.054705][T20704] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1242.054718][T20704] RBP: 00007f911e6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.054729][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.054739][T20704] R13: 00007f911da16038 R14: 00007f911da15fa0 R15: 00007ffe2dc35288 [ 1242.054768][T20704] [ 1242.893122][T20737] netlink: 'syz.2.14371': attribute type 1 has an invalid length. [ 1243.849246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1243.857544][ C0] lec:lec_tx_timeout: lec0 [ 1244.158298][T20759] __nla_validate_parse: 6 callbacks suppressed [ 1244.158316][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14376'. [ 1244.175108][T20759] FAULT_INJECTION: forcing a failure. [ 1244.175108][T20759] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.188398][T20759] CPU: 0 UID: 0 PID: 20759 Comm: syz.0.14376 Not tainted syzkaller #0 PREEMPT(full) [ 1244.188421][T20759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1244.188430][T20759] Call Trace: [ 1244.188437][T20759] [ 1244.188444][T20759] dump_stack_lvl+0xe8/0x150 [ 1244.188480][T20759] should_fail_ex+0x412/0x560 [ 1244.188507][T20759] should_failslab+0xa8/0x100 [ 1244.188530][T20759] __kmalloc_cache_noprof+0x88/0x660 [ 1244.188550][T20759] ? nft_pernet+0x23/0x240 [ 1244.188573][T20759] ? nf_tables_newtable+0x435/0x1910 [ 1244.188600][T20759] nf_tables_newtable+0x435/0x1910 [ 1244.188620][T20759] ? nfnetlink_has_listeners+0x1/0x50 [ 1244.188661][T20759] nfnetlink_rcv+0x1240/0x27b0 [ 1244.188717][T20759] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1244.188757][T20759] ? ref_tracker_free+0x693/0x840 [ 1244.188810][T20759] ? __netlink_deliver_tap+0x807/0x850 [ 1244.188837][T20759] ? netlink_deliver_tap+0x2e/0x1b0 [ 1244.188878][T20759] netlink_unicast+0x80f/0x9b0 [ 1244.188911][T20759] ? __pfx_netlink_unicast+0x10/0x10 [ 1244.188937][T20759] ? netlink_sendmsg+0x650/0xb40 [ 1244.188950][T20759] ? skb_put+0x11b/0x210 [ 1244.188970][T20759] netlink_sendmsg+0x813/0xb40 [ 1244.188994][T20759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.189013][T20759] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1244.189037][T20759] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1244.189059][T20759] ____sys_sendmsg+0x972/0x9f0 [ 1244.189086][T20759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1244.189113][T20759] ? import_iovec+0x73/0xa0 [ 1244.189135][T20759] ___sys_sendmsg+0x2a5/0x360 [ 1244.189160][T20759] ? __pfx____sys_sendmsg+0x10/0x10 [ 1244.189210][T20759] ? __fget_files+0x2a/0x420 [ 1244.189233][T20759] ? __fget_files+0x3a0/0x420 [ 1244.189265][T20759] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1244.189286][T20759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1244.189313][T20759] ? __pfx_ksys_write+0x10/0x10 [ 1244.189343][T20759] do_syscall_64+0x14d/0xf80 [ 1244.189361][T20759] ? trace_irq_disable+0x3b/0x150 [ 1244.189375][T20759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.189392][T20759] ? clear_bhb_loop+0x40/0x90 [ 1244.189411][T20759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.189427][T20759] RIP: 0033:0x7f625b39c819 [ 1244.189444][T20759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.189467][T20759] RSP: 002b:00007f625c2e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1244.189485][T20759] RAX: ffffffffffffffda RBX: 00007f625b615fa0 RCX: 00007f625b39c819 [ 1244.189497][T20759] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1244.189507][T20759] RBP: 00007f625c2e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.189517][T20759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.189527][T20759] R13: 00007f625b616038 R14: 00007f625b615fa0 R15: 00007ffc128a1dc8 [ 1244.189555][T20759] [ 1244.982865][T20740] 8021q: VLANs not supported on ip6gre0 [ 1245.018752][T20748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1245.191850][T20770] wireguard0: entered promiscuous mode [ 1245.217570][T20770] wireguard0: entered allmulticast mode [ 1245.251215][T20770] team0: Device wireguard0 is of different type [ 1245.453273][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14382'. [ 1245.890034][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14389'. [ 1245.899567][T20810] FAULT_INJECTION: forcing a failure. [ 1245.899567][T20810] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.918816][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14387'. [ 1245.929892][T20810] CPU: 0 UID: 0 PID: 20810 Comm: syz.2.14389 Not tainted syzkaller #0 PREEMPT(full) [ 1245.929916][T20810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1245.929928][T20810] Call Trace: [ 1245.929935][T20810] [ 1245.929943][T20810] dump_stack_lvl+0xe8/0x150 [ 1245.929973][T20810] should_fail_ex+0x412/0x560 [ 1245.930005][T20810] should_failslab+0xa8/0x100 [ 1245.930029][T20810] __kmalloc_noprof+0xe8/0x760 [ 1245.930063][T20810] ? __kasan_kmalloc+0x93/0xb0 [ 1245.930084][T20810] ? nla_strdup+0x9d/0x140 [ 1245.930101][T20810] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1245.930126][T20810] nla_strdup+0x9d/0x140 [ 1245.930151][T20810] nf_tables_newtable+0x491/0x1910 [ 1245.930193][T20810] nfnetlink_rcv+0x1240/0x27b0 [ 1245.930253][T20810] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1245.930303][T20810] ? ref_tracker_free+0x693/0x840 [ 1245.930359][T20810] ? __netlink_deliver_tap+0x807/0x850 [ 1245.930387][T20810] ? netlink_deliver_tap+0x2e/0x1b0 [ 1245.930431][T20810] netlink_unicast+0x80f/0x9b0 [ 1245.930465][T20810] ? __pfx_netlink_unicast+0x10/0x10 [ 1245.930493][T20810] ? netlink_sendmsg+0x650/0xb40 [ 1245.930507][T20810] ? skb_put+0x11b/0x210 [ 1245.930530][T20810] netlink_sendmsg+0x813/0xb40 [ 1245.930555][T20810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1245.930576][T20810] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1245.930605][T20810] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1245.930630][T20810] ____sys_sendmsg+0x972/0x9f0 [ 1245.930662][T20810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1245.930693][T20810] ? import_iovec+0x73/0xa0 [ 1245.930717][T20810] ___sys_sendmsg+0x2a5/0x360 [ 1245.930743][T20810] ? __pfx____sys_sendmsg+0x10/0x10 [ 1245.930797][T20810] ? __fget_files+0x2a/0x420 [ 1245.930823][T20810] ? __fget_files+0x3a0/0x420 [ 1245.930858][T20810] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1245.930884][T20810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1245.930916][T20810] ? __pfx_ksys_write+0x10/0x10 [ 1245.930949][T20810] do_syscall_64+0x14d/0xf80 [ 1245.930970][T20810] ? trace_irq_disable+0x3b/0x150 [ 1245.930986][T20810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.931004][T20810] ? clear_bhb_loop+0x40/0x90 [ 1245.931027][T20810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.931045][T20810] RIP: 0033:0x7fe38939c819 [ 1245.931063][T20810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.931079][T20810] RSP: 002b:00007fe38a334028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1245.931098][T20810] RAX: ffffffffffffffda RBX: 00007fe389615fa0 RCX: 00007fe38939c819 [ 1245.931112][T20810] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1245.931124][T20810] RBP: 00007fe38a334090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.931136][T20810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.931148][T20810] R13: 00007fe389616038 R14: 00007fe389615fa0 R15: 00007ffe484881a8 [ 1245.931180][T20810] [ 1246.268766][T20808] netlink: 'syz.4.14387': attribute type 1 has an invalid length. [ 1246.280195][T20808] netlink: 'syz.4.14387': attribute type 1 has an invalid length. [ 1246.718776][T20838] nbd: must specify a size in bytes for the device [ 1246.733270][T20838] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14398'. [ 1246.749028][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14396'. [ 1246.770999][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14396'. [ 1246.905190][T20847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14402'. [ 1246.956477][T20847] FAULT_INJECTION: forcing a failure. [ 1246.956477][T20847] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.016314][T20847] CPU: 1 UID: 0 PID: 20847 Comm: syz.1.14402 Not tainted syzkaller #0 PREEMPT(full) [ 1247.016340][T20847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1247.016350][T20847] Call Trace: [ 1247.016358][T20847] [ 1247.016367][T20847] dump_stack_lvl+0xe8/0x150 [ 1247.016398][T20847] should_fail_ex+0x412/0x560 [ 1247.016430][T20847] should_failslab+0xa8/0x100 [ 1247.016456][T20847] __kvmalloc_node_noprof+0x178/0x8a0 [ 1247.016483][T20847] ? nf_hook_entries_grow+0x288/0x720 [ 1247.016506][T20847] ? __pfx___mutex_lock+0x10/0x10 [ 1247.016533][T20847] nf_hook_entries_grow+0x288/0x720 [ 1247.016566][T20847] __nf_register_net_hook+0x2c9/0x930 [ 1247.016597][T20847] nf_register_net_hook+0xf9/0x190 [ 1247.016619][T20847] nf_tables_table_enable+0x479/0x9d0 [ 1247.016642][T20847] ? nft_trans_alloc+0x22/0x2a0 [ 1247.016669][T20847] ? nft_trans_alloc+0x40/0x2a0 [ 1247.016695][T20847] nf_tables_newtable+0x1337/0x1910 [ 1247.016737][T20847] nfnetlink_rcv+0x1240/0x27b0 [ 1247.016797][T20847] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1247.016839][T20847] ? ref_tracker_free+0x693/0x840 [ 1247.016893][T20847] ? __netlink_deliver_tap+0x807/0x850 [ 1247.016921][T20847] ? netlink_deliver_tap+0x2e/0x1b0 [ 1247.016965][T20847] netlink_unicast+0x80f/0x9b0 [ 1247.016999][T20847] ? __pfx_netlink_unicast+0x10/0x10 [ 1247.017026][T20847] ? netlink_sendmsg+0x650/0xb40 [ 1247.017043][T20847] ? skb_put+0x11b/0x210 [ 1247.017066][T20847] netlink_sendmsg+0x813/0xb40 [ 1247.017094][T20847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.017115][T20847] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1247.017144][T20847] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1247.017169][T20847] ____sys_sendmsg+0x972/0x9f0 [ 1247.017217][T20847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.017249][T20847] ? import_iovec+0x73/0xa0 [ 1247.017275][T20847] ___sys_sendmsg+0x2a5/0x360 [ 1247.017303][T20847] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.017361][T20847] ? __fget_files+0x2a/0x420 [ 1247.017387][T20847] ? __fget_files+0x3a0/0x420 [ 1247.017424][T20847] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1247.017450][T20847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1247.017480][T20847] ? __pfx_ksys_write+0x10/0x10 [ 1247.017514][T20847] do_syscall_64+0x14d/0xf80 [ 1247.017535][T20847] ? trace_irq_disable+0x3b/0x150 [ 1247.017551][T20847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.017570][T20847] ? clear_bhb_loop+0x40/0x90 [ 1247.017592][T20847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.017610][T20847] RIP: 0033:0x7f911d79c819 [ 1247.017628][T20847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.017643][T20847] RSP: 002b:00007f911e6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.017663][T20847] RAX: ffffffffffffffda RBX: 00007f911da15fa0 RCX: 00007f911d79c819 [ 1247.017677][T20847] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1247.017689][T20847] RBP: 00007f911e6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.017701][T20847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.017712][T20847] R13: 00007f911da16038 R14: 00007f911da15fa0 R15: 00007ffe2dc35288 [ 1247.017743][T20847] [ 1247.922652][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14415'. [ 1247.962794][T20885] vcan0: tx address claim with different name [ 1248.186253][T20898] netlink: 'syz.4.14421': attribute type 12 has an invalid length. [ 1248.194310][T20898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14421'. [ 1248.308658][T15215] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 1248.330905][T15215] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 1248.347451][T15215] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 1248.370113][T15215] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 1248.399126][T20910] netlink: 'syz.2.14427': attribute type 14 has an invalid length. [ 1248.481384][T20917] IPv6: Can't replace route, no match found [ 1248.509889][T20917] IPv6: Can't replace route, no match found [ 1248.590051][T20924] vcan0: tx address claim with different name [ 1249.247364][T20969] __nla_validate_parse: 4 callbacks suppressed [ 1249.247383][T20969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14444'. [ 1250.141178][T20996] wireguard0: entered promiscuous mode [ 1250.156168][T20996] wireguard0: entered allmulticast mode [ 1250.165655][T20996] team0: Device wireguard0 is of different type [ 1250.533125][T21012] tipc: Enabling of bearer rejected, failed to enable media [ 1250.568532][T21012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14454'. [ 1250.572596][T21015] netlink: 'syz.4.14453': attribute type 3 has an invalid length. [ 1250.608291][T21015] netlink: 'syz.4.14453': attribute type 1 has an invalid length. [ 1250.619029][T21012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14454'. [ 1250.675418][T21015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1250.832926][T21020] bond3: (slave geneve2): making interface the new active one [ 1250.847919][T21020] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1251.066826][T21035] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1251.189430][T21042] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 1251.263217][T21044] netlink: 'syz.0.14462': attribute type 11 has an invalid length. [ 1251.753062][T21057] netlink: 'syz.1.14467': attribute type 12 has an invalid length. [ 1251.806157][T21057] netlink: 160 bytes leftover after parsing attributes in process `syz.1.14467'. [ 1251.831711][T21059] netlink: 276 bytes leftover after parsing attributes in process `syz.3.14468'. [ 1251.835479][T21061] SET target dimension over the limit! [ 1252.193841][T21084] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1252.219328][T21084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.338969][T21084] tipc: Resetting bearer [ 1252.345444][T21084] tipc: Resetting bearer [ 1252.385058][T21099] netlink: 'syz.0.14483': attribute type 12 has an invalid length. [ 1252.428022][T21099] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14483'. [ 1252.445084][T21100] netlink: 88 bytes leftover after parsing attributes in process `syz.1.14482'. [ 1252.489009][T21100] netem: invalid attributes len -24 [ 1252.635197][T21111] wireguard1: entered promiscuous mode [ 1252.648534][T21111] wireguard1: entered allmulticast mode [ 1252.699811][T21111] team0: Port device wireguard1 added [ 1252.727110][T15225] tipc: Resetting bearer [ 1252.732680][T15225] tipc: Resetting bearer [ 1252.899081][T21123] netlink: 'syz.1.14489': attribute type 8 has an invalid length. [ 1253.400437][T21159] netlink: 'syz.4.14498': attribute type 12 has an invalid length. [ 1253.420370][T21159] netlink: 160 bytes leftover after parsing attributes in process `syz.4.14498'. [ 1254.383108][T21191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14509'. [ 1254.688380][T21203] syzkaller0: entered promiscuous mode [ 1254.699607][T21203] syzkaller0: entered allmulticast mode [ 1254.801400][T21207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14516'. [ 1255.170723][T21231] vxcan1: tx address claim with dlc 0 [ 1255.214135][T21235] netlink: 256 bytes leftover after parsing attributes in process `syz.2.14525'. [ 1255.281840][T21239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14527'. [ 1255.307999][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14528'. [ 1255.416655][T21250] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14531'. [ 1255.440184][T21250] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1255.473790][T21252] wireguard0: entered promiscuous mode [ 1255.495635][T21252] wireguard0: entered allmulticast mode [ 1255.534660][T21252] team0: Device wireguard0 is of different type [ 1255.623088][T21267] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1256.164631][T21295] sit0: entered promiscuous mode [ 1256.189568][T21295] netlink: 'syz.0.14539': attribute type 1 has an invalid length. [ 1256.209768][T21303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14542'. [ 1256.222181][T21303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14542'. [ 1256.247760][T21295] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14539'. [ 1256.871876][T21328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14550'. [ 1257.123503][T21360] netlink: 'syz.2.14560': attribute type 1 has an invalid length. [ 1257.132907][T21360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1257.617851][T21392] FAULT_INJECTION: forcing a failure. [ 1257.617851][T21392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.646165][T21392] CPU: 1 UID: 0 PID: 21392 Comm: syz.2.14572 Not tainted syzkaller #0 PREEMPT(full) [ 1257.646190][T21392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1257.646202][T21392] Call Trace: [ 1257.646210][T21392] [ 1257.646219][T21392] dump_stack_lvl+0xe8/0x150 [ 1257.646249][T21392] should_fail_ex+0x412/0x560 [ 1257.646278][T21392] _copy_to_user+0x31/0xb0 [ 1257.646300][T21392] simple_read_from_buffer+0xe1/0x170 [ 1257.646331][T21392] proc_fail_nth_read+0x1bb/0x230 [ 1257.646360][T21392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1257.646390][T21392] ? rw_verify_area+0x2a6/0x4d0 [ 1257.646409][T21392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1257.646437][T21392] vfs_read+0x20c/0xa70 [ 1257.646455][T21392] ? fdget_pos+0x246/0x320 [ 1257.646477][T21392] ? __pfx___mutex_lock+0x10/0x10 [ 1257.646502][T21392] ? __pfx_vfs_read+0x10/0x10 [ 1257.646523][T21392] ? __fget_files+0x2a/0x420 [ 1257.646554][T21392] ? __fget_files+0x3a0/0x420 [ 1257.646578][T21392] ? __fget_files+0x2a/0x420 [ 1257.646613][T21392] ksys_read+0x150/0x270 [ 1257.646636][T21392] ? __pfx_ksys_read+0x10/0x10 [ 1257.646668][T21392] do_syscall_64+0x14d/0xf80 [ 1257.646690][T21392] ? trace_irq_disable+0x3b/0x150 [ 1257.646705][T21392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.646723][T21392] ? clear_bhb_loop+0x40/0x90 [ 1257.646744][T21392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.646762][T21392] RIP: 0033:0x7fe38935d04e [ 1257.646781][T21392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1257.646796][T21392] RSP: 002b:00007fe38a312fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1257.646814][T21392] RAX: ffffffffffffffda RBX: 00007fe38a3136c0 RCX: 00007fe38935d04e [ 1257.646827][T21392] RDX: 000000000000000f RSI: 00007fe38a3130a0 RDI: 0000000000000006 [ 1257.646837][T21392] RBP: 00007fe38a313090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.646848][T21392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.646859][T21392] R13: 00007fe389616128 R14: 00007fe389616090 R15: 00007ffe484881a8 [ 1257.646887][T21392] [ 1258.656557][T21438] netlink: 'syz.4.14588': attribute type 1 has an invalid length. [ 1258.781448][T21446] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1258.921862][T21458] netlink: 'syz.1.14594': attribute type 33 has an invalid length. [ 1259.104681][T21475] netlink: 'syz.1.14601': attribute type 1 has an invalid length. [ 1259.180762][T21474] bond8: (slave bridge12): Enslaving as a backup interface with an up link [ 1259.233102][T21474] bond8: (slave bridge13): Enslaving as a backup interface with a down link [ 1259.852884][T21507] vcan0: tx address claim with dlc 0 [ 1260.079484][T21516] __nla_validate_parse: 7 callbacks suppressed [ 1260.079505][T21516] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14615'. [ 1260.137673][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14615'. [ 1260.487868][ T2141] block nbd3: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 240 seconds [ 1260.502802][ T11] block nbd1: Possible stuck request ffff888026e40000: control (read@0,1024B). Runtime 240 seconds [ 1260.513953][ T2141] block nbd3: Possible stuck request ffff888026f00200: control (read@1024,1024B). Runtime 240 seconds [ 1260.525300][ T11] block nbd1: Possible stuck request ffff888026e40200: control (read@1024,1024B). Runtime 240 seconds [ 1260.537145][ T2141] block nbd3: Possible stuck request ffff888026f00400: control (read@2048,1024B). Runtime 240 seconds [ 1260.549496][ T11] block nbd1: Possible stuck request ffff888026e40400: control (read@2048,1024B). Runtime 240 seconds [ 1260.567925][ T2141] block nbd3: Possible stuck request ffff888026f00600: control (read@3072,1024B). Runtime 240 seconds [ 1260.579190][ T11] block nbd1: Possible stuck request ffff888026e40600: control (read@3072,1024B). Runtime 240 seconds [ 1260.649110][T21536] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1260.710488][T21539] netlink: 'syz.0.14624': attribute type 51 has an invalid length. [ 1261.681324][T21578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14638'. [ 1261.702068][T21578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14638'. [ 1261.790942][T21585] netlink: 'syz.1.14640': attribute type 2 has an invalid length. [ 1261.835136][T21590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14641'. [ 1261.912969][T21592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14643'. [ 1262.010463][T21608] FAULT_INJECTION: forcing a failure. [ 1262.010463][T21608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.033496][T21608] CPU: 0 UID: 0 PID: 21608 Comm: syz.2.14647 Not tainted syzkaller #0 PREEMPT(full) [ 1262.033552][T21608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1262.033564][T21608] Call Trace: [ 1262.033572][T21608] [ 1262.033580][T21608] dump_stack_lvl+0xe8/0x150 [ 1262.033611][T21608] should_fail_ex+0x412/0x560 [ 1262.033642][T21608] _copy_from_user+0x2d/0xb0 [ 1262.033663][T21608] ___sys_sendmsg+0x1c6/0x360 [ 1262.033691][T21608] ? __pfx____sys_sendmsg+0x10/0x10 [ 1262.033717][T21608] ? kstrtouint+0x6e/0xe0 [ 1262.033765][T21608] ? __fget_files+0x2a/0x420 [ 1262.033790][T21608] ? __fget_files+0x3a0/0x420 [ 1262.033825][T21608] __sys_sendmmsg+0x27c/0x4e0 [ 1262.033851][T21608] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1262.033869][T21608] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1262.033912][T21608] ? ksys_write+0x242/0x270 [ 1262.033933][T21608] ? __pfx_ksys_write+0x10/0x10 [ 1262.033959][T21608] __x64_sys_sendmmsg+0xa0/0xc0 [ 1262.033981][T21608] do_syscall_64+0x14d/0xf80 [ 1262.034000][T21608] ? trace_irq_disable+0x3b/0x150 [ 1262.034017][T21608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.034035][T21608] ? clear_bhb_loop+0x40/0x90 [ 1262.034057][T21608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.034075][T21608] RIP: 0033:0x7fe38939c819 [ 1262.034092][T21608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.034109][T21608] RSP: 002b:00007fe38a334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1262.034129][T21608] RAX: ffffffffffffffda RBX: 00007fe389615fa0 RCX: 00007fe38939c819 [ 1262.034143][T21608] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 1262.034154][T21608] RBP: 00007fe38a334090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.034166][T21608] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000001 [ 1262.034176][T21608] R13: 00007fe389616038 R14: 00007fe389615fa0 R15: 00007ffe484881a8 [ 1262.034206][T21608] [ 1262.354633][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14648'. [ 1262.394439][T21617] wireguard0: entered promiscuous mode [ 1262.432606][T21617] wireguard0: entered allmulticast mode [ 1262.474883][T21617] team0: Device wireguard0 is of different type [ 1262.502017][T21625] vcan0: tx address claim with dlc 0 [ 1262.783008][T21650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14656'. [ 1262.783198][T21641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14655'. [ 1262.804539][T21641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14655'. [ 1262.861249][ T7286] lec:lec_start_xmit: lec0:No lecd attached [ 1263.118072][T21667] sctp: [Deprecated]: syz.1.14662 (pid 21667) Use of int in maxseg socket option. [ 1263.118072][T21667] Use struct sctp_assoc_value instead [ 1263.245032][T21677] netlink: 'syz.2.14667': attribute type 1 has an invalid length. [ 1263.278574][T21677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.300437][T21677] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1263.330046][T21677] bond0: entered allmulticast mode [ 1263.466876][T21690] wireguard1: entered promiscuous mode [ 1263.472392][T21690] wireguard1: entered allmulticast mode [ 1263.517053][T21690] team0: Port device wireguard1 added [ 1263.538899][T21693] netlink: 'syz.2.14673': attribute type 12 has an invalid length. [ 1263.628100][T21705] syzkaller1: entered promiscuous mode [ 1263.645386][T21705] syzkaller1: entered allmulticast mode [ 1263.721214][T21705] bond4: (slave bond_slave_1): Device is not our slave [ 1263.729785][T21705] bond4: option active_slave: invalid value (bond_slave_1) [ 1263.745405][T21705] bond4 (unregistering): Released all slaves [ 1263.889449][T21723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1264.213115][T21745] netlink: 'syz.0.14681': attribute type 3 has an invalid length. [ 1264.400036][T21761] netlink: 'syz.0.14688': attribute type 12 has an invalid length. [ 1264.770888][T21789] netlink: 'syz.0.14697': attribute type 2 has an invalid length. [ 1265.188675][T21819] __nla_validate_parse: 43 callbacks suppressed [ 1265.188698][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14710'. [ 1265.220857][T21821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14711'. [ 1265.383070][T15216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.394596][T15216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.610927][T21848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14720'. [ 1265.621622][T21848] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14720'. [ 1265.749448][T21854] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1265.849523][T21863] xt_nat: multiple ranges no longer supported [ 1266.013385][T21875] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1266.020468][T21875] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1266.244756][T21886] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1266.313944][T21890] netlink: 212 bytes leftover after parsing attributes in process `syz.0.14736'. [ 1266.553062][T21899] syzkaller0: entered promiscuous mode [ 1266.559072][T21899] syzkaller0: entered allmulticast mode [ 1267.344094][T21924] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1267.481873][T21926] syzkaller1: entered promiscuous mode [ 1267.491479][T21926] syzkaller1: entered allmulticast mode [ 1267.538631][T21926] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.14747'. [ 1267.635360][T21937] netlink: 'syz.3.14751': attribute type 12 has an invalid length. [ 1267.660816][T21937] netlink: 160 bytes leftover after parsing attributes in process `syz.3.14751'. [ 1267.855136][T21945] netlink: 'syz.4.14752': attribute type 15 has an invalid length. [ 1267.872389][T21940] bridge1: port 1(erspan0) entered disabled state [ 1267.875885][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1267.885935][T21945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14752'. [ 1267.886974][ C0] lec:lec_tx_timeout: lec0 [ 1267.917582][T21940] sit0: left promiscuous mode [ 1268.377122][T21940] batadv_slave_0: left promiscuous mode [ 1268.773062][T21957] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14754'. [ 1268.881570][T21940] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1268.940510][T21940] mac80211_hwsim hwsim116 wlan0: left promiscuous mode [ 1268.986671][T21940] vlan2: left allmulticast mode [ 1268.996997][T21940] bridge1: left allmulticast mode [ 1269.003403][T21940] bond1: left promiscuous mode [ 1269.021075][T21940] vcan1: left promiscuous mode [ 1269.032448][T21940] vcan1: left allmulticast mode [ 1269.035692][T21962] vcan0: tx address claim with dlc 0 [ 1269.077538][T21940] vlan3: left promiscuous mode [ 1269.087441][T21940] bond3: left promiscuous mode [ 1269.092476][T21940] vlan3: left allmulticast mode [ 1269.098535][T21940] bond3: left allmulticast mode [ 1269.193140][T21940] wireguard0: left promiscuous mode [ 1269.198758][T21940] wireguard0: left allmulticast mode [ 1269.215552][T21940] ip6gre1: left promiscuous mode [ 1269.231867][T21940] wireguard1: left promiscuous mode [ 1269.237608][T21940] wireguard1: left allmulticast mode [ 1269.253310][T21947] macvlan0: entered promiscuous mode [ 1269.261827][T15229] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.276569][T15229] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.329159][T15229] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.357291][T15216] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.547770][T21983] netlink: 10168 bytes leftover after parsing attributes in process `syz.2.14764'. [ 1269.690024][T21993] IPv4: Oversized IP packet from 127.202.26.0 [ 1269.794451][T21999] netlink: 'syz.2.14770': attribute type 12 has an invalid length. [ 1269.850866][T22001] 0·: renamed from hsr_slave_1 (while UP) [ 1269.871153][T22001] 0·: entered allmulticast mode [ 1269.883518][T22001] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1270.284781][T22021] syzkaller1: entered promiscuous mode [ 1270.298694][T22021] syzkaller1: entered allmulticast mode [ 1270.464487][T22036] netlink: 'syz.0.14783': attribute type 12 has an invalid length. [ 1270.510231][T22036] __nla_validate_parse: 4 callbacks suppressed [ 1270.510253][T22036] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14783'. [ 1270.774548][T22057] syzkaller1: entered promiscuous mode [ 1270.780412][T22057] syzkaller1: entered allmulticast mode [ 1270.900298][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14794'. [ 1270.916945][T22066] vlan6: entered allmulticast mode [ 1270.918788][T22068] FAULT_INJECTION: forcing a failure. [ 1270.918788][T22068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.922312][T22066] bridge0: entered allmulticast mode [ 1270.938156][T22068] CPU: 0 UID: 0 PID: 22068 Comm: syz.0.14793 Not tainted syzkaller #0 PREEMPT(full) [ 1270.938180][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1270.938191][T22068] Call Trace: [ 1270.938199][T22068] [ 1270.938206][T22068] dump_stack_lvl+0xe8/0x150 [ 1270.938237][T22068] should_fail_ex+0x412/0x560 [ 1270.938266][T22068] _copy_from_user+0x2d/0xb0 [ 1270.938287][T22068] sctp_setsockopt+0x1c4/0x12c0 [ 1270.938306][T22068] ? sock_common_setsockopt+0x36/0xc0 [ 1270.938333][T22068] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1270.938360][T22068] do_sock_setsockopt+0x17c/0x1b0 [ 1270.938384][T22068] __x64_sys_setsockopt+0x13d/0x1b0 [ 1270.938408][T22068] do_syscall_64+0x14d/0xf80 [ 1270.938428][T22068] ? trace_irq_disable+0x3b/0x150 [ 1270.938444][T22068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.938462][T22068] ? clear_bhb_loop+0x40/0x90 [ 1270.938483][T22068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.938499][T22068] RIP: 0033:0x7f625b39c819 [ 1270.938516][T22068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.938531][T22068] RSP: 002b:00007f625c2e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1270.938550][T22068] RAX: ffffffffffffffda RBX: 00007f625b615fa0 RCX: 00007f625b39c819 [ 1270.938563][T22068] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 1270.938574][T22068] RBP: 00007f625c2e0090 R08: 000000000000000e R09: 0000000000000000 [ 1270.938586][T22068] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1270.938597][T22068] R13: 00007f625b616038 R14: 00007f625b615fa0 R15: 00007ffc128a1dc8 [ 1270.938624][T22068] [ 1271.155638][T22072] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1271.231782][T22080] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1271.282548][T22082] netlink: 'syz.4.14799': attribute type 12 has an invalid length. [ 1271.306646][T22082] netlink: 160 bytes leftover after parsing attributes in process `syz.4.14799'. [ 1271.546476][T22099] FAULT_INJECTION: forcing a failure. [ 1271.546476][T22099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.573783][T22099] CPU: 1 UID: 0 PID: 22099 Comm: syz.0.14805 Not tainted syzkaller #0 PREEMPT(full) [ 1271.573806][T22099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1271.573817][T22099] Call Trace: [ 1271.573825][T22099] [ 1271.573833][T22099] dump_stack_lvl+0xe8/0x150 [ 1271.573861][T22099] should_fail_ex+0x412/0x560 [ 1271.573890][T22099] _copy_to_user+0x31/0xb0 [ 1271.573912][T22099] simple_read_from_buffer+0xe1/0x170 [ 1271.573942][T22099] proc_fail_nth_read+0x1bb/0x230 [ 1271.573971][T22099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1271.573998][T22099] ? rw_verify_area+0x2a6/0x4d0 [ 1271.574016][T22099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1271.574039][T22099] vfs_read+0x20c/0xa70 [ 1271.574056][T22099] ? fdget_pos+0x246/0x320 [ 1271.574076][T22099] ? __pfx___mutex_lock+0x10/0x10 [ 1271.574099][T22099] ? __pfx_vfs_read+0x10/0x10 [ 1271.574120][T22099] ? __fget_files+0x2a/0x420 [ 1271.574148][T22099] ? __fget_files+0x3a0/0x420 [ 1271.574171][T22099] ? __fget_files+0x2a/0x420 [ 1271.574202][T22099] ksys_read+0x150/0x270 [ 1271.574223][T22099] ? __pfx_ksys_read+0x10/0x10 [ 1271.574248][T22099] do_syscall_64+0x14d/0xf80 [ 1271.574266][T22099] ? trace_irq_disable+0x3b/0x150 [ 1271.574282][T22099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.574299][T22099] ? clear_bhb_loop+0x40/0x90 [ 1271.574321][T22099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.574339][T22099] RIP: 0033:0x7f625b35d04e [ 1271.574355][T22099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1271.574369][T22099] RSP: 002b:00007f625c2dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1271.574388][T22099] RAX: ffffffffffffffda RBX: 00007f625c2e06c0 RCX: 00007f625b35d04e [ 1271.574401][T22099] RDX: 000000000000000f RSI: 00007f625c2e00a0 RDI: 0000000000000004 [ 1271.574412][T22099] RBP: 00007f625c2e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.574424][T22099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.574434][T22099] R13: 00007f625b616038 R14: 00007f625b615fa0 R15: 00007ffc128a1dc8 [ 1271.574463][T22099] [ 1271.845605][T22116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14810'. [ 1271.932151][T22124] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1271.992452][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14814'. [ 1272.058783][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14810'. [ 1272.217863][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14816'. [ 1272.707252][T22163] policy can only be matched on NF_INET_PRE_ROUTING [ 1272.707273][T22163] unable to load match [ 1272.773157][T22164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14823'. [ 1272.853842][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14825'. [ 1272.908647][T22175] set match dimension is over the limit! [ 1273.369987][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1273.380232][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1273.407265][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1273.417919][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1273.429987][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1273.533717][T22202] wg0 speed is unknown, defaulting to 1000 [ 1273.756871][T22202] chnl_net:caif_netlink_parms(): no params data found [ 1274.048032][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14840'. [ 1274.059251][T22202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.076163][T22202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.098913][T22202] bridge_slave_0: entered allmulticast mode [ 1274.121441][T22202] bridge_slave_0: entered promiscuous mode [ 1274.131494][T22202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.139210][T22202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.146874][T22202] bridge_slave_1: entered allmulticast mode [ 1274.154748][T22202] bridge_slave_1: entered promiscuous mode [ 1274.280537][T22202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.318442][T22202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.360665][T22202] team0: Port device team_slave_0 added [ 1274.381943][T22202] team0: Port device team_slave_1 added [ 1274.513373][T22252] wireguard0: entered promiscuous mode [ 1274.528055][T22252] wireguard0: entered allmulticast mode [ 1274.548108][T22252] team0: Device wireguard0 is of different type [ 1274.617144][T22202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.624124][T22202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.826009][T22202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.892307][T22202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.936319][T22202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.022588][T22202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.170588][T22202] hsr_slave_0: entered promiscuous mode [ 1275.179059][T22202] hsr_slave_1: entered promiscuous mode [ 1275.200224][T22202] debugfs: 'hsr0' already exists in 'hsr' [ 1275.211744][T22202] Cannot create hsr debugfs directory [ 1275.528275][ T5820] Bluetooth: hci5: command tx timeout [ 1275.582528][T22202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.595368][T22202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.625258][T22310] tipc: Started in network mode [ 1275.636748][T22310] tipc: Node identity , cluster identity 4711 [ 1275.643449][T22310] tipc: Failed to obtain node identity [ 1275.653928][T22310] tipc: Enabling of bearer rejected, failed to enable media [ 1275.711438][T22202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.722189][T22202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.742106][T22317] netlink: 'syz.0.14862': attribute type 11 has an invalid length. [ 1275.750820][T22318] __nla_validate_parse: 8 callbacks suppressed [ 1275.750841][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14860'. [ 1275.770209][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14860'. [ 1275.883101][T22310] syzkaller0: entered promiscuous mode [ 1275.888745][T22310] syzkaller0: entered allmulticast mode [ 1275.971806][T22202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.986210][T22202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.021212][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14863'. [ 1276.043478][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14863'. [ 1276.079718][T22202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.093023][T22202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.215532][T22322] macvtap1: entered promiscuous mode [ 1276.224971][T22322] vlan0: entered promiscuous mode [ 1276.231750][T22322] macvtap1: entered allmulticast mode [ 1276.238805][T22322] vlan0: entered allmulticast mode [ 1276.244099][T22322] veth0_vlan: entered allmulticast mode [ 1276.505399][T22349] netlink: 'syz.0.14872': attribute type 2 has an invalid length. [ 1276.536130][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14872'. [ 1276.565767][T22349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14872'. [ 1276.598314][T22202] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1276.615082][T22202] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1276.644358][T22202] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1276.671123][T22202] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1276.849807][T22202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.884673][T22202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.894763][T22374] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1276.901307][T15228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.911109][T15228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.960852][T21740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.968173][T21740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.079260][T22376] netlink: 248 bytes leftover after parsing attributes in process `syz.0.14879'. [ 1277.285235][T22202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.329902][T22202] veth0_vlan: entered promiscuous mode [ 1277.351429][T22202] veth1_vlan: entered promiscuous mode [ 1277.388352][T22202] veth0_macvtap: entered promiscuous mode [ 1277.407777][T22202] veth1_macvtap: entered promiscuous mode [ 1277.454458][T22202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.481379][T22202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.535569][T15231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.556347][T15231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.569401][T15231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.579310][T15231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.608916][ T5820] Bluetooth: hci5: command tx timeout [ 1277.708873][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14886'. [ 1277.814481][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14887'. [ 1277.871892][T15228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.906361][T15228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.003765][T21740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.059470][T21740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.306574][T22420] vcan0: tx address claim with dlc 0 [ 1278.369755][T22422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14893'. [ 1278.686174][T22436] netlink: 'syz.4.14900': attribute type 10 has an invalid length. [ 1278.700577][T22440] netlink: 'syz.0.14901': attribute type 1 has an invalid length. [ 1278.778454][T22436] veth0_vlan: left promiscuous mode [ 1278.787179][T22439] netlink: 'syz.1.14899': attribute type 1 has an invalid length. [ 1278.793819][T22436] veth0_vlan: entered promiscuous mode [ 1278.835550][T22436] team0: Device veth0_vlan failed to register rx_handler [ 1279.139822][T22460] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1279.547170][T22484] netlink: 'syz.4.14916': attribute type 30 has an invalid length. [ 1279.697161][ T5820] Bluetooth: hci5: command tx timeout [ 1279.740294][T15228] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.779990][T15228] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.817513][T15228] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.861860][T15228] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.899788][T22502] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1280.417381][T22519] mpoa:mpoad_close: () going down [ 1280.565269][T22522] netlink: 'syz.2.14926': attribute type 29 has an invalid length. [ 1280.586557][T22522] netlink: 'syz.2.14926': attribute type 29 has an invalid length. [ 1280.750598][T22537] gre2: entered allmulticast mode [ 1280.756456][T22536] __nla_validate_parse: 13 callbacks suppressed [ 1280.756476][T22536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14930'. [ 1280.822939][T22543] netlink: 140 bytes leftover after parsing attributes in process `syz.1.14932'. [ 1280.881545][T22542] netlink: 'syz.4.14933': attribute type 29 has an invalid length. [ 1280.900457][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14933'. [ 1280.998889][T22559] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14935'. [ 1281.070287][T22562] netlink: 'syz.2.14936': attribute type 3 has an invalid length. [ 1281.083378][T22562] netlink: 'syz.2.14936': attribute type 1 has an invalid length. [ 1281.093588][T22563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14937'. [ 1281.105080][T22562] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14936'. [ 1281.242192][T22574] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1281.427774][T22586] netlink: 'syz.1.14944': attribute type 7 has an invalid length. [ 1281.599972][T22596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14948'. [ 1281.774377][ T5820] Bluetooth: hci5: command tx timeout [ 1281.827264][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14950'. [ 1282.542142][T22644] wireguard2: entered promiscuous mode [ 1282.557252][T22644] wireguard2: entered allmulticast mode [ 1282.591949][T22644] team0: Port device wireguard2 added [ 1282.615442][T22649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14963'. [ 1282.645287][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14963'. [ 1282.963252][T22665] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1283.297784][T22683] vcan0: tx address claim with dlc 0 [ 1283.670883][T22707] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1284.157825][T22728] netlink: 'syz.3.14989': attribute type 1 has an invalid length. [ 1284.600438][T22749] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1285.032948][T22776] netlink: 'syz.1.15004': attribute type 5 has an invalid length. [ 1285.273533][T22790] netlink: 'syz.0.15008': attribute type 1 has an invalid length. [ 1285.292870][T22790] netlink: 'syz.0.15008': attribute type 2 has an invalid length. [ 1285.311684][T22792] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1285.689136][T22811] wireguard0: entered promiscuous mode [ 1285.689715][T22815] FAULT_INJECTION: forcing a failure. [ 1285.689715][T22815] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.694646][T22811] wireguard0: entered allmulticast mode [ 1285.744245][T22815] CPU: 1 UID: 0 PID: 22815 Comm: syz.4.15017 Not tainted syzkaller #0 PREEMPT(full) [ 1285.744271][T22815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1285.744283][T22815] Call Trace: [ 1285.744290][T22815] [ 1285.744299][T22815] dump_stack_lvl+0xe8/0x150 [ 1285.744329][T22815] should_fail_ex+0x412/0x560 [ 1285.744362][T22815] should_failslab+0xa8/0x100 [ 1285.744384][T22815] ? dst_alloc+0x105/0x170 [ 1285.744407][T22815] kmem_cache_alloc_noprof+0x87/0x650 [ 1285.744434][T22815] dst_alloc+0x105/0x170 [ 1285.744459][T22815] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1285.744481][T22815] ? ip_route_output_key_hash_rcu+0x1d01/0x25d0 [ 1285.744523][T22815] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1285.744545][T22815] ip_route_output_key_hash+0x18d/0x2a0 [ 1285.744569][T22815] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1285.744605][T22815] tcp_v4_connect+0x74e/0x19b0 [ 1285.744651][T22815] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1285.744675][T22815] ? aa_label_sk_perm+0x532/0x6e0 [ 1285.744700][T22815] ? tcp_v6_connect+0x62d/0x1b10 [ 1285.744730][T22815] tcp_v6_connect+0xbbb/0x1b10 [ 1285.744755][T22815] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1285.744792][T22815] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1285.744830][T22815] __inet_stream_connect+0x25a/0xdd0 [ 1285.744860][T22815] ? do_raw_spin_lock+0x12b/0x2f0 [ 1285.744882][T22815] ? __pfx___inet_stream_connect+0x10/0x10 [ 1285.744908][T22815] ? inet_stream_connect+0x51/0xa0 [ 1285.744932][T22815] ? __local_bh_enable_ip+0xd0/0x130 [ 1285.744959][T22815] inet_stream_connect+0x66/0xa0 [ 1285.744985][T22815] __sys_connect+0x312/0x450 [ 1285.745007][T22815] ? __pfx___sys_connect+0x10/0x10 [ 1285.745037][T22815] ? __pfx_ksys_write+0x10/0x10 [ 1285.745066][T22815] __x64_sys_connect+0x7a/0x90 [ 1285.745086][T22815] do_syscall_64+0x14d/0xf80 [ 1285.745110][T22815] ? trace_irq_disable+0x3b/0x150 [ 1285.745126][T22815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.745144][T22815] ? clear_bhb_loop+0x40/0x90 [ 1285.745165][T22815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.745184][T22815] RIP: 0033:0x7f94e839c819 [ 1285.745202][T22815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.745218][T22815] RSP: 002b:00007f94e932c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1285.745238][T22815] RAX: ffffffffffffffda RBX: 00007f94e8615fa0 RCX: 00007f94e839c819 [ 1285.745250][T22815] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 1285.745260][T22815] RBP: 00007f94e932c090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.745270][T22815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.745280][T22815] R13: 00007f94e8616038 R14: 00007f94e8615fa0 R15: 00007ffe170f2678 [ 1285.745308][T22815] [ 1285.748773][T22811] team0: Device wireguard0 is of different type [ 1285.807906][T22824] __nla_validate_parse: 3 callbacks suppressed [ 1285.807925][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15019'. [ 1286.162192][T22819] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1286.195458][T22819] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1286.358181][T22847] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15022'. [ 1286.376916][T22848] netlink: 'syz.0.15023': attribute type 2 has an invalid length. [ 1286.681072][T22867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1286.938700][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15034'. [ 1287.036585][T22889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15035'. [ 1287.046725][T22889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15035'. [ 1287.069929][T22889] netlink: 'syz.2.15035': attribute type 1 has an invalid length. [ 1287.181981][T22880] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.15031'. [ 1287.375060][T22907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15042'. [ 1287.508518][T22911] netlink: 'syz.1.15043': attribute type 51 has an invalid length. [ 1287.519306][T22913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1287.530690][T22911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.546699][T22911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.556283][T22911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.563759][T22911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.645728][T22923] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 1287.673277][T22920] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15046'. [ 1287.881460][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15052'. [ 1287.881474][T22934] netlink: 'syz.2.15052': attribute type 1 has an invalid length. [ 1287.903540][T22938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15053'. [ 1287.933725][T22934] bond6: entered promiscuous mode [ 1287.942293][T22934] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1287.970193][T22939] delete_channel: no stack [ 1288.123674][T22957] netlink: 'syz.3.15060': attribute type 9 has an invalid length. [ 1288.337577][T22974] FAULT_INJECTION: forcing a failure. [ 1288.337577][T22974] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.350433][T22974] CPU: 1 UID: 0 PID: 22974 Comm: syz.2.15065 Not tainted syzkaller #0 PREEMPT(full) [ 1288.350469][T22974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1288.350480][T22974] Call Trace: [ 1288.350488][T22974] [ 1288.350495][T22974] dump_stack_lvl+0xe8/0x150 [ 1288.350526][T22974] should_fail_ex+0x412/0x560 [ 1288.350554][T22974] should_failslab+0xa8/0x100 [ 1288.350577][T22974] ? __inet_hash_connect+0x1497/0x2440 [ 1288.350602][T22974] kmem_cache_alloc_noprof+0x87/0x650 [ 1288.350621][T22974] ? __inet_hash_connect+0xd48/0x2440 [ 1288.350653][T22974] __inet_hash_connect+0x1497/0x2440 [ 1288.350692][T22974] ? __inet_hash_connect+0x4cf/0x2440 [ 1288.350725][T22974] ? __pfx___inet_hash_connect+0x10/0x10 [ 1288.350758][T22974] ? inet_hash_connect+0x12f/0x240 [ 1288.350784][T22974] tcp_v4_connect+0xd5f/0x19b0 [ 1288.350825][T22974] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1288.350847][T22974] ? aa_label_sk_perm+0x532/0x6e0 [ 1288.350870][T22974] ? tcp_v6_connect+0x62d/0x1b10 [ 1288.350900][T22974] tcp_v6_connect+0xbbb/0x1b10 [ 1288.351009][T22974] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1288.351085][T22974] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1288.351125][T22974] __inet_stream_connect+0x25a/0xdd0 [ 1288.351157][T22974] ? do_raw_spin_lock+0x12b/0x2f0 [ 1288.351180][T22974] ? __pfx___inet_stream_connect+0x10/0x10 [ 1288.351206][T22974] ? inet_stream_connect+0x51/0xa0 [ 1288.351232][T22974] ? __local_bh_enable_ip+0xd0/0x130 [ 1288.351261][T22974] inet_stream_connect+0x66/0xa0 [ 1288.351283][T22974] __sys_connect+0x312/0x450 [ 1288.351305][T22974] ? __pfx___sys_connect+0x10/0x10 [ 1288.351332][T22974] ? __pfx_ksys_write+0x10/0x10 [ 1288.351359][T22974] __x64_sys_connect+0x7a/0x90 [ 1288.351376][T22974] do_syscall_64+0x14d/0xf80 [ 1288.351395][T22974] ? trace_irq_disable+0x3b/0x150 [ 1288.351410][T22974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.351427][T22974] ? clear_bhb_loop+0x40/0x90 [ 1288.351447][T22974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.351463][T22974] RIP: 0033:0x7fe38939c819 [ 1288.351481][T22974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.351495][T22974] RSP: 002b:00007fe38a334028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1288.351512][T22974] RAX: ffffffffffffffda RBX: 00007fe389615fa0 RCX: 00007fe38939c819 [ 1288.351524][T22974] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 1288.351534][T22974] RBP: 00007fe38a334090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.351544][T22974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.351554][T22974] R13: 00007fe389616038 R14: 00007fe389615fa0 R15: 00007ffe484881a8 [ 1288.351580][T22974] [ 1288.949977][T23003] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1288.989606][T23006] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1290.566464][ T2141] block nbd3: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 270 seconds [ 1290.588161][ T2141] block nbd3: Possible stuck request ffff888026f00200: control (read@1024,1024B). Runtime 270 seconds [ 1290.599486][ T11] block nbd1: Possible stuck request ffff888026e40000: control (read@0,1024B). Runtime 270 seconds [ 1290.610941][ T2141] block nbd3: Possible stuck request ffff888026f00400: control (read@2048,1024B). Runtime 270 seconds [ 1290.623185][ T11] block nbd1: Possible stuck request ffff888026e40200: control (read@1024,1024B). Runtime 270 seconds [ 1290.634367][ T11] block nbd1: Possible stuck request ffff888026e40400: control (read@2048,1024B). Runtime 270 seconds [ 1290.645689][ T2141] block nbd3: Possible stuck request ffff888026f00600: control (read@3072,1024B). Runtime 270 seconds [ 1290.666195][ T2141] block nbd1: Possible stuck request ffff888026e40600: control (read@3072,1024B). Runtime 270 seconds [ 1291.063353][T23010] wireguard0: entered promiscuous mode [ 1291.076169][T23010] wireguard0: entered allmulticast mode [ 1291.095458][T23010] team0: Device wireguard0 is of different type [ 1291.130640][T23037] FAULT_INJECTION: forcing a failure. [ 1291.130640][T23037] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.143782][T23037] CPU: 0 UID: 0 PID: 23037 Comm: syz.0.15078 Not tainted syzkaller #0 PREEMPT(full) [ 1291.143809][T23037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1291.143820][T23037] Call Trace: [ 1291.143828][T23037] [ 1291.143836][T23037] dump_stack_lvl+0xe8/0x150 [ 1291.143869][T23037] should_fail_ex+0x412/0x560 [ 1291.143903][T23037] should_failslab+0xa8/0x100 [ 1291.143930][T23037] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1291.143953][T23037] ? __alloc_skb+0x1d0/0x7d0 [ 1291.143972][T23037] ? ipv4_default_advmss+0x20/0x340 [ 1291.143998][T23037] __alloc_skb+0x1d0/0x7d0 [ 1291.144022][T23037] tcp_stream_alloc_skb+0x3f/0x580 [ 1291.144045][T23037] ? __asan_memset+0x22/0x50 [ 1291.144065][T23037] tcp_connect+0x1527/0x5370 [ 1291.144094][T23037] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.144148][T23037] ? __pfx_tcp_connect+0x10/0x10 [ 1291.144184][T23037] ? __asan_memset+0x22/0x50 [ 1291.144207][T23037] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1291.144232][T23037] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 1291.144260][T23037] ? sk_setup_caps+0x9ef/0xc40 [ 1291.144283][T23037] ? sk_setup_caps+0x29/0xc40 [ 1291.144306][T23037] tcp_v4_connect+0x10f6/0x19b0 [ 1291.144350][T23037] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1291.144375][T23037] ? aa_label_sk_perm+0x532/0x6e0 [ 1291.144400][T23037] ? tcp_v6_connect+0x62d/0x1b10 [ 1291.144431][T23037] tcp_v6_connect+0xbbb/0x1b10 [ 1291.144456][T23037] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1291.144494][T23037] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1291.144532][T23037] __inet_stream_connect+0x25a/0xdd0 [ 1291.144563][T23037] ? do_raw_spin_lock+0x12b/0x2f0 [ 1291.144584][T23037] ? __pfx___inet_stream_connect+0x10/0x10 [ 1291.144610][T23037] ? inet_stream_connect+0x51/0xa0 [ 1291.144633][T23037] ? __local_bh_enable_ip+0xd0/0x130 [ 1291.144662][T23037] inet_stream_connect+0x66/0xa0 [ 1291.144688][T23037] __sys_connect+0x312/0x450 [ 1291.144710][T23037] ? __pfx___sys_connect+0x10/0x10 [ 1291.144742][T23037] ? __pfx_ksys_write+0x10/0x10 [ 1291.144771][T23037] __x64_sys_connect+0x7a/0x90 [ 1291.144791][T23037] do_syscall_64+0x14d/0xf80 [ 1291.144812][T23037] ? trace_irq_disable+0x3b/0x150 [ 1291.144828][T23037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.144847][T23037] ? clear_bhb_loop+0x40/0x90 [ 1291.144869][T23037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.144887][T23037] RIP: 0033:0x7f625b39c819 [ 1291.144904][T23037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.144920][T23037] RSP: 002b:00007f625c2e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1291.144940][T23037] RAX: ffffffffffffffda RBX: 00007f625b615fa0 RCX: 00007f625b39c819 [ 1291.144954][T23037] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 1291.144967][T23037] RBP: 00007f625c2e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.144979][T23037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.144990][T23037] R13: 00007f625b616038 R14: 00007f625b615fa0 R15: 00007ffc128a1dc8 [ 1291.145021][T23037] [ 1291.490407][T23043] __nla_validate_parse: 4 callbacks suppressed [ 1291.490426][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15081'. [ 1291.559899][T23044] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15080'. [ 1291.664655][T23051] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1291.791077][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15087'. [ 1292.005975][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 1292.068589][T23082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15093'. [ 1292.404513][T23100] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1292.447184][T23102] wireguard2: entered promiscuous mode [ 1292.458453][T23102] wireguard2: entered allmulticast mode [ 1292.468826][T23102] team0: Port device wireguard2 added [ 1292.489668][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15101'. [ 1293.059529][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15108'. [ 1293.186946][T23150] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1293.257144][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15111'. [ 1293.456671][T23162] x_tables: duplicate entry at hook 1 [ 1293.634980][T23176] netlink: 'syz.4.15120': attribute type 21 has an invalid length. [ 1293.657080][T23176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15120'. [ 1293.697793][T23176] netlink: 'syz.4.15120': attribute type 1 has an invalid length. [ 1293.715026][T23179] wireguard0: entered promiscuous mode [ 1293.735552][T23179] wireguard0: entered allmulticast mode [ 1293.742235][T23182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15121'. [ 1293.805945][T23182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15121'. [ 1293.962642][T23179] team0: Device wireguard0 is of different type [ 1294.307125][T23210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.457091][T23210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.466040][T23210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.512449][T23221] netlink: 'syz.3.15129': attribute type 7 has an invalid length. [ 1294.607429][T23226] vlan5: entered allmulticast mode [ 1294.613493][T23226] mac80211_hwsim hwsim116 wlan0: entered allmulticast mode [ 1294.648552][T23229] netlink: 'syz.2.15132': attribute type 4 has an invalid length. [ 1294.656653][T23229] netlink: 'syz.2.15132': attribute type 3 has an invalid length. [ 1294.997700][T23259] sctp: [Deprecated]: syz.0.15142 (pid 23259) Use of int in maxseg socket option. [ 1294.997700][T23259] Use struct sctp_assoc_value instead [ 1295.063059][T23262] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1295.456554][T23278] netlink: 'syz.1.15147': attribute type 12 has an invalid length. [ 1295.500189][T23241] mpoa:mpoad_close: () going down [ 1295.697521][T23295] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1295.723009][T23290] wg0 speed is unknown, defaulting to 1000 [ 1295.843938][T23308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1295.851262][T23308] IPv6: NLM_F_CREATE should be set when creating new route [ 1295.870658][T23312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1296.004421][T23319] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 1296.427647][T23338] x_tables: duplicate underflow at hook 2 [ 1296.502811][T23338] __nla_validate_parse: 11 callbacks suppressed [ 1296.502833][T23338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15165'. [ 1296.518361][T23348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15169'. [ 1296.717801][T23347] openvswitch: netlink: Unknown key attributes 2 [ 1296.871455][T23362] netlink: 'syz.1.15175': attribute type 7 has an invalid length. [ 1296.912107][T23362] netlink: 'syz.1.15175': attribute type 8 has an invalid length. [ 1297.017203][T23369] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.15176'. [ 1297.243890][T23382] veth1_macvtap: left promiscuous mode [ 1297.252723][T23382] macsec0: entered promiscuous mode [ 1297.258533][T23382] macsec0: entered allmulticast mode [ 1297.333776][T23389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15185'. [ 1297.651283][T23401] can: request_module (can-proto-5) failed. [ 1297.685667][T23402] can: request_module (can-proto-5) failed. [ 1297.712837][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1297.724366][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1297.738185][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1297.747772][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1297.757085][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1297.824340][T23407] wg0 speed is unknown, defaulting to 1000 [ 1298.153442][T23407] chnl_net:caif_netlink_parms(): no params data found [ 1298.223248][T23425] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1298.513967][T23441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15200'. [ 1298.600274][T23407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.629441][T23407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.644084][T23407] bridge_slave_0: entered allmulticast mode [ 1298.666295][T23407] bridge_slave_0: entered promiscuous mode [ 1298.675560][T23407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.683664][T23407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.696890][T23407] bridge_slave_1: entered allmulticast mode [ 1298.704743][T23407] bridge_slave_1: entered promiscuous mode [ 1298.766882][T23407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.819259][T23407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.839894][T23453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15205'. [ 1298.852830][T23455] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1298.862672][T23453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15205'. [ 1298.884601][T23453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15205'. [ 1298.903493][T23407] team0: Port device team_slave_0 added [ 1298.939217][T23407] team0: Port device team_slave_1 added [ 1298.952637][T23453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15205'. [ 1298.981403][T23453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15205'. [ 1299.003380][T23407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.011646][T23407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.039077][T23407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.059564][T23407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.067119][T23407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.095557][T23407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.154573][T23407] hsr_slave_0: entered promiscuous mode [ 1299.161730][T23407] hsr_slave_1: entered promiscuous mode [ 1299.169625][T23407] debugfs: 'hsr0' already exists in 'hsr' [ 1299.175379][T23407] Cannot create hsr debugfs directory [ 1299.299830][T23407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.311464][T23407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.322991][T23407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1299.420666][T23407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.431450][T23407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.442022][T23407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1299.517285][T23407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.528160][T23407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.538966][T23407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1299.609988][T23407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.620959][T23407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.633199][T23407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1299.757406][T23407] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1299.769888][T23407] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1299.779917][T23407] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1299.790544][T23407] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1299.847208][ T5142] Bluetooth: hci2: command tx timeout [ 1299.861596][T23407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.881378][T23407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.893798][T31655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.900982][T31655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.914506][T31664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.921692][T31664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.073831][T23407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.114707][T23407] veth0_vlan: entered promiscuous mode [ 1300.125493][T23407] veth1_vlan: entered promiscuous mode [ 1300.154102][T23407] veth0_macvtap: entered promiscuous mode [ 1300.165069][T23407] veth1_macvtap: entered promiscuous mode [ 1300.172659][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.188506][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1300.188547][T23407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.194800][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1300.206566][T23407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.229691][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.238618][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.251037][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.278064][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.328498][T31655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.336576][T31655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.374937][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.384523][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.926225][ T5142] Bluetooth: hci2: command tx timeout [ 1304.006589][ T5142] Bluetooth: hci2: command tx timeout [ 1305.845940][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1305.853983][ C0] lec:lec_tx_timeout: lec0 [ 1306.086688][ T5142] Bluetooth: hci2: command tx timeout [ 1320.648625][ T2141] block nbd1: Possible stuck request ffff888026e40000: control (read@0,1024B). Runtime 300 seconds [ 1320.659919][ T2141] block nbd1: Possible stuck request ffff888026e40200: control (read@1024,1024B). Runtime 300 seconds [ 1320.671319][ T11] block nbd3: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 300 seconds [ 1320.682254][ T11] block nbd3: Possible stuck request ffff888026f00200: control (read@1024,1024B). Runtime 300 seconds [ 1320.693607][ T11] block nbd3: Possible stuck request ffff888026f00400: control (read@2048,1024B). Runtime 300 seconds [ 1320.705095][ T2141] block nbd1: Possible stuck request ffff888026e40400: control (read@2048,1024B). Runtime 300 seconds [ 1320.716554][ T2141] block nbd1: Possible stuck request ffff888026e40600: control (read@3072,1024B). Runtime 300 seconds [ 1320.727859][ T11] block nbd3: Possible stuck request ffff888026f00600: control (read@3072,1024B). Runtime 300 seconds [ 1321.607788][T23495] __nla_validate_parse: 4 callbacks suppressed [ 1321.607807][T23495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15213'. [ 1321.609642][T23497] netlink: 'syz.1.15209': attribute type 4 has an invalid length. [ 1321.710276][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15217'. [ 1321.755453][T23506] netlink: 120 bytes leftover after parsing attributes in process `syz.4.15218'. [ 1321.817842][T23510] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1321.984925][T23520] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15225'. [ 1322.081695][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15228'. [ 1322.177541][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15230'. [ 1322.223783][T23538] wireguard0: entered promiscuous mode [ 1322.236935][T23538] wireguard0: entered allmulticast mode [ 1322.247603][T23538] team0: Device wireguard0 is of different type [ 1322.330416][T23546] pim6reg: entered allmulticast mode [ 1322.477146][T23552] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15236'. [ 1322.675648][T23569] sctp: [Deprecated]: syz.3.15238 (pid 23569) Use of int in max_burst socket option deprecated. [ 1322.675648][T23569] Use struct sctp_assoc_value instead [ 1322.757965][T23566] sctp: [Deprecated]: syz.3.15238 (pid 23566) Use of int in max_burst socket option deprecated. [ 1322.757965][T23566] Use struct sctp_assoc_value instead [ 1322.768001][T23579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15240'. [ 1322.977448][T23588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15242'. [ 1322.998029][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15243'. [ 1323.258170][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1323.271117][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1323.296626][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1323.318664][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1323.342423][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1323.506458][T23599] wg0 speed is unknown, defaulting to 1000 [ 1323.959587][T23599] chnl_net:caif_netlink_parms(): no params data found [ 1324.181419][T23599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.189036][T23599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.196586][T23599] bridge_slave_0: entered allmulticast mode [ 1324.204432][T23599] bridge_slave_0: entered promiscuous mode [ 1324.213647][T23599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.221549][T23599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.229417][T23599] bridge_slave_1: entered allmulticast mode [ 1324.237439][T23599] bridge_slave_1: entered promiscuous mode [ 1324.313885][T23599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.327226][T23634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1324.329493][T23599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.360016][T23636] netlink: 'syz.0.15259': attribute type 30 has an invalid length. [ 1324.377761][T23636] netlink: 'syz.0.15259': attribute type 30 has an invalid length. [ 1324.379640][T23599] team0: Port device team_slave_0 added [ 1324.395230][T23599] team0: Port device team_slave_1 added [ 1324.491165][T23599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.498667][T23599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.556148][T23599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.572125][T23599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.579779][T23599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.609698][T23599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.721693][T23599] hsr_slave_0: entered promiscuous mode [ 1324.729716][T23599] hsr_slave_1: entered promiscuous mode [ 1324.736674][T23599] debugfs: 'hsr0' already exists in 'hsr' [ 1324.742473][T23599] Cannot create hsr debugfs directory [ 1325.010856][T23599] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1325.029860][T23599] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.146832][T23599] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1325.186054][T23599] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.253601][T23599] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1325.264630][T23599] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.343090][T23599] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1325.369278][T23599] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.376253][ T5142] Bluetooth: hci3: command tx timeout [ 1325.965084][T23599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1325.992889][T23599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1326.027537][T23599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1326.071815][T23599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1326.136202][T23679] openvswitch: netlink: Flow key attr not present in new flow. [ 1326.321689][T23599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.381299][T23599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.414996][T15231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.422220][T15231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.430237][T23695] netlink: 'syz.2.15280': attribute type 1 has an invalid length. [ 1326.462886][T15231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.470097][T15231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.686468][ T7286] lec:lec_start_xmit: lec0:No lecd attached [ 1326.797088][T23599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.063290][T23714] netlink: 'syz.0.15284': attribute type 12 has an invalid length. [ 1327.138092][T23719] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1327.149041][T23719] __nla_validate_parse: 13 callbacks suppressed [ 1327.149060][T23719] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.15284'. [ 1327.150106][T23720] netlink: 'syz.3.15285': attribute type 29 has an invalid length. [ 1327.325210][T23599] veth0_vlan: entered promiscuous mode [ 1327.342180][T23599] veth1_vlan: entered promiscuous mode [ 1327.397482][T23599] veth0_macvtap: entered promiscuous mode [ 1327.421576][T23599] veth1_macvtap: entered promiscuous mode [ 1327.441163][T23730] netlink: 'syz.0.15287': attribute type 2 has an invalid length. [ 1327.449178][ T5142] Bluetooth: hci3: command tx timeout [ 1327.461545][T23599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.505288][T23599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.544881][T15228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.564460][T15228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.590648][T23735] netlink: 92 bytes leftover after parsing attributes in process `syz.2.15289'. [ 1327.601086][T15228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.606781][T23735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15289'. [ 1327.612339][T15228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.733030][T21732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.743957][T21732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.786548][T31664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.794549][T31664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.872200][T23745] netlink: 'syz.4.15244': attribute type 2 has an invalid length. [ 1327.944568][T23751] netlink: 'syz.4.15294': attribute type 2 has an invalid length. [ 1328.013994][T23755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15295'. [ 1328.025000][T23757] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15296'. [ 1328.459602][T23788] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1328.473007][T23788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15307'. [ 1328.483259][T23788] netlink: 35 bytes leftover after parsing attributes in process `syz.0.15307'. [ 1328.521731][T23788] netlink: 'syz.0.15307': attribute type 5 has an invalid length. [ 1328.552395][T23788] netlink: 'syz.0.15307': attribute type 6 has an invalid length. [ 1328.560699][T23788] netlink: 35 bytes leftover after parsing attributes in process `syz.0.15307'. [ 1328.574030][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15308'. [ 1328.783002][T23811] wireguard3: entered promiscuous mode [ 1328.807674][T23811] wireguard3: entered allmulticast mode [ 1328.862545][T23811] team0: Port device wireguard3 added [ 1329.133727][T23835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15315'. [ 1329.181190][T23833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.202690][T23832] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1329.212406][T23834] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1329.213589][T23833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.227428][T23832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.242111][T23834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.464081][T23852] netlink: 'syz.2.15323': attribute type 12 has an invalid length. [ 1329.526134][ T5142] Bluetooth: hci3: command tx timeout [ 1329.971344][T23868] netlink: 'syz.4.15330': attribute type 7 has an invalid length. [ 1329.981171][T23868] netlink: 'syz.4.15330': attribute type 8 has an invalid length. [ 1329.994981][T23868] team0: entered promiscuous mode [ 1330.007699][T23868] team_slave_0: entered promiscuous mode [ 1330.013849][T23868] team_slave_1: entered promiscuous mode [ 1330.025334][T23868] gretap0: entered promiscuous mode [ 1330.032667][T23868] erspan0: entered promiscuous mode [ 1330.114433][T23876] dummy0: entered promiscuous mode [ 1330.120832][T23876] bridge0: port 3(dummy0) entered blocking state [ 1330.130098][T23876] bridge0: port 3(dummy0) entered disabled state [ 1330.138063][T23876] dummy0: entered allmulticast mode [ 1330.150183][T23876] bridge0: port 3(dummy0) entered blocking state [ 1330.156691][T23876] bridge0: port 3(dummy0) entered forwarding state [ 1330.658082][T23917] xt_hashlimit: size too large, truncated to 1048576 [ 1331.287867][T23951] vcan0: tx address claim with dlc 0 [ 1331.608108][ T5142] Bluetooth: hci3: command tx timeout [ 1331.675107][T23981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1331.783654][T23992] vcan0: tx address claim with dlc 0 [ 1331.845822][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms [ 1331.853896][ C0] lec:lec_tx_timeout: lec0 [ 1332.120073][T24007] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1332.377288][T24009] bridge0: port 3(dummy0) entered disabled state [ 1332.383871][T24009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.391527][T24009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.414712][T24027] __nla_validate_parse: 11 callbacks suppressed [ 1332.414730][T24027] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.15379'. [ 1332.452023][T24029] netlink: 264 bytes leftover after parsing attributes in process `syz.3.15377'. [ 1332.994951][T24009] macsec0: left promiscuous mode [ 1333.006859][T24009] macsec0: left allmulticast mode [ 1333.034158][T24009] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1333.135057][T31655] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.167304][T31655] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.206912][T24033] vcan0: tx address claim with dlc 0 [ 1333.223847][T24012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.269138][T31655] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.292952][T24023] wg0 speed is unknown, defaulting to 1000 [ 1333.432111][T24043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15385'. [ 1333.544439][T24047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15387'. [ 1333.637645][T24057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15390'. [ 1333.764611][T24060] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1333.786829][T14147] IPVS: starting estimator thread 0... [ 1333.838012][T24062] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.15392'. [ 1333.871729][T24071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15394'. [ 1333.875970][T24067] IPVS: using max 35 ests per chain, 84000 per kthread [ 1333.883916][T24071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15394'. [ 1333.898736][T24071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15394'. [ 1333.973130][T24076] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.15396'. [ 1333.985166][T24076] netlink: Conntrack attr has 3 unknown bytes [ 1334.405593][T24100] validate_nla: 4 callbacks suppressed [ 1334.405611][T24100] netlink: 'syz.0.15404': attribute type 1 has an invalid length. [ 1334.530589][T24103] netlink: 'syz.4.15405': attribute type 64 has an invalid length. [ 1335.323140][T24140] syzkaller0: entered allmulticast mode [ 1335.483812][T24152] syzkaller0: entered promiscuous mode [ 1335.497026][T24152] syzkaller0: entered allmulticast mode [ 1336.101673][T24200] bridge_slave_0: invalid flags given to default FDB implementation [ 1336.187681][T24208] netlink: 'syz.4.15443': attribute type 4 has an invalid length. [ 1336.323302][T24218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.340949][T24217] gretap1: entered promiscuous mode [ 1336.362594][T24217] gretap1: entered allmulticast mode [ 1336.612474][T24234] FAULT_INJECTION: forcing a failure. [ 1336.612474][T24234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.629695][T24234] CPU: 0 UID: 0 PID: 24234 Comm: syz.3.15452 Not tainted syzkaller #0 PREEMPT(full) [ 1336.629721][T24234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1336.629730][T24234] Call Trace: [ 1336.629738][T24234] [ 1336.629745][T24234] dump_stack_lvl+0xe8/0x150 [ 1336.629774][T24234] should_fail_ex+0x412/0x560 [ 1336.629802][T24234] _copy_from_iter+0x1d3/0x1670 [ 1336.629831][T24234] ? rcu_is_watching+0x15/0xb0 [ 1336.629859][T24234] ? __pfx__copy_from_iter+0x10/0x10 [ 1336.629894][T24234] ? netlink_sendmsg+0x650/0xb40 [ 1336.629910][T24234] ? skb_put+0x11b/0x210 [ 1336.629933][T24234] netlink_sendmsg+0x6c0/0xb40 [ 1336.629959][T24234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1336.629980][T24234] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1336.630007][T24234] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1336.630030][T24234] ____sys_sendmsg+0x972/0x9f0 [ 1336.630060][T24234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1336.630090][T24234] ? import_iovec+0x73/0xa0 [ 1336.630113][T24234] ___sys_sendmsg+0x2a5/0x360 [ 1336.630139][T24234] ? __pfx____sys_sendmsg+0x10/0x10 [ 1336.630192][T24234] ? __fget_files+0x2a/0x420 [ 1336.630216][T24234] ? __fget_files+0x3a0/0x420 [ 1336.630249][T24234] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1336.630272][T24234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1336.630302][T24234] ? __pfx_ksys_write+0x10/0x10 [ 1336.630333][T24234] do_syscall_64+0x14d/0xf80 [ 1336.630353][T24234] ? trace_irq_disable+0x3b/0x150 [ 1336.630369][T24234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.630388][T24234] ? clear_bhb_loop+0x40/0x90 [ 1336.630409][T24234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.630427][T24234] RIP: 0033:0x7f950a79c819 [ 1336.630445][T24234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.630461][T24234] RSP: 002b:00007f950b63e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1336.630481][T24234] RAX: ffffffffffffffda RBX: 00007f950aa15fa0 RCX: 00007f950a79c819 [ 1336.630495][T24234] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1336.630507][T24234] RBP: 00007f950b63e090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.630519][T24234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.630530][T24234] R13: 00007f950aa16038 R14: 00007f950aa15fa0 R15: 00007ffc37359ed8 [ 1336.630560][T24234] [ 1337.168139][T24261] netlink: 'syz.4.15459': attribute type 12 has an invalid length. [ 1337.301527][T24257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1337.492533][T24284] netlink: 'syz.3.15462': attribute type 2 has an invalid length. [ 1337.544550][T24284] __nla_validate_parse: 36 callbacks suppressed [ 1337.544715][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15462'. [ 1337.550775][T24289] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1337.679785][T24293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15469'. [ 1337.735585][T24297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1337.840618][T24305] netlink: 'syz.3.15474': attribute type 1 has an invalid length. [ 1337.870873][T24305] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15474'. [ 1338.003810][T24314] netlink: 88 bytes leftover after parsing attributes in process `syz.1.15479'. [ 1338.187687][T24325] netlink: get zone limit has 4 unknown bytes [ 1338.294958][T24334] netlink: 'syz.0.15485': attribute type 51 has an invalid length. [ 1338.333289][T24334] netlink: 'syz.0.15485': attribute type 10 has an invalid length. [ 1338.438742][T24327] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15485'. [ 1338.478262][T24342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15486'. [ 1338.638648][T24355] netlink: 'syz.0.15485': attribute type 3 has an invalid length. [ 1338.738304][T24362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15490'. [ 1340.393265][T24334] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1340.402146][T24338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15482'. [ 1340.557557][T24373] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.15492'. [ 1340.771943][T24388] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15497'. [ 1340.936614][T24402] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20000 [ 1340.960268][T24406] netlink: 'syz.2.15501': attribute type 1 has an invalid length. [ 1340.968658][T24398] wg0 speed is unknown, defaulting to 1000 [ 1341.343781][T24435] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1341.557557][T24445] pim6reg1: entered promiscuous mode [ 1341.563782][T24445] pim6reg1: entered allmulticast mode [ 1341.640687][T24452] netlink: 'syz.4.15515': attribute type 7 has an invalid length. [ 1342.047051][T24478] tipc: Started in network mode [ 1342.068469][T24478] tipc: Node identity 86462f904db7, cluster identity 4711 [ 1342.090043][T24478] tipc: Enabled bearer , priority 0 [ 1342.130928][T24476] tipc: Disabling bearer [ 1342.361583][T24495] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1342.574277][T24514] __nla_validate_parse: 11 callbacks suppressed [ 1342.574305][T24514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15530'. [ 1342.649554][T24514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15530'. [ 1342.660578][T24514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15530'. [ 1342.887896][T24537] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1343.131354][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15541'. [ 1343.162860][T24550] macvlan2: entered allmulticast mode [ 1343.176753][T24552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15542'. [ 1343.197559][T24550] hsr0: entered allmulticast mode [ 1343.202732][T24550] hsr_slave_0: entered allmulticast mode [ 1343.209570][T24550] hsr_slave_1: entered allmulticast mode [ 1343.318058][T24561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15545'. [ 1343.396823][T24566] netlink: 256 bytes leftover after parsing attributes in process `syz.3.15547'. [ 1343.410247][T24566] netlink: 256 bytes leftover after parsing attributes in process `syz.3.15547'. [ 1343.424993][T24566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15547'. [ 1343.584857][T24582] netlink: 'syz.3.15554': attribute type 1 has an invalid length. [ 1343.598643][T24582] netlink: 'syz.3.15554': attribute type 1 has an invalid length. [ 1343.609915][T24582] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.15554'. [ 1343.783018][T24596] Cannot find add_set index 0 as target [ 1343.917181][T24601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1344.162450][T24617] netlink: 'syz.2.15568': attribute type 1 has an invalid length. [ 1344.190753][T24617] netlink: 'syz.2.15568': attribute type 2 has an invalid length. [ 1344.216130][T24617] netlink: 'syz.2.15568': attribute type 1 has an invalid length. [ 1344.344553][T24624] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1344.637260][T24649] wireguard0: entered promiscuous mode [ 1344.655267][T24649] wireguard0: entered allmulticast mode [ 1344.659696][T24656] netlink: 'syz.4.15582': attribute type 1 has an invalid length. [ 1344.675480][T24649] team0: Device wireguard0 is of different type [ 1345.557477][T24698] 8021q: VLANs not supported on team0 [ 1346.203137][T24745] wireguard4: entered promiscuous mode [ 1346.223452][T24745] wireguard4: entered allmulticast mode [ 1346.249837][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1346.281948][T24745] team0: Port device wireguard4 added [ 1346.316938][T24755] sock: sock_set_timeout: `syz.4.15606' (pid 24755) tries to set negative timeout [ 1346.584943][T24772] netlink: zone id is out of range [ 1346.592660][T24772] netlink: zone id is out of range [ 1346.598738][T24772] netlink: zone id is out of range [ 1346.604044][T24772] netlink: zone id is out of range [ 1346.611374][T24772] netlink: zone id is out of range [ 1346.618875][T24772] netlink: zone id is out of range [ 1346.635053][T24772] netlink: zone id is out of range [ 1346.746937][T24778] netlink: 'syz.0.15611': attribute type 1 has an invalid length. [ 1347.173631][T24817] wireguard5: entered promiscuous mode [ 1347.212152][T24817] wireguard5: entered allmulticast mode [ 1347.265101][T24817] team0: Port device wireguard5 added [ 1347.581340][T24821] syzkaller0: entered promiscuous mode [ 1347.604281][T24821] syzkaller0: entered allmulticast mode [ 1347.642850][T24850] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1348.918101][T24876] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 1349.060567][T24881] sctp: [Deprecated]: syz.2.15637 (pid 24881) Use of int in maxseg socket option. [ 1349.060567][T24881] Use struct sctp_assoc_value instead [ 1349.762831][T24884] pimreg: entered allmulticast mode [ 1350.002672][T24897] __nla_validate_parse: 60 callbacks suppressed [ 1350.002694][T24897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15642'. [ 1350.090132][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1350.122406][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1350.136835][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1350.154777][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1350.162740][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1350.203086][T24905] wg0 speed is unknown, defaulting to 1000 [ 1350.259066][T24912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15648'. [ 1350.330635][T24913] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15647'. [ 1350.341470][T24913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15647'. [ 1350.379150][T24913] syzkaller0: entered promiscuous mode [ 1350.384950][T24913] syzkaller0: entered allmulticast mode [ 1350.425387][T24913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.434984][T24913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.598389][T24917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15649'. [ 1350.610392][T24917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15649'. [ 1350.620631][T24917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15649'. [ 1350.665296][T24905] chnl_net:caif_netlink_parms(): no params data found [ 1350.696391][T24920] netlink: 'syz.2.15650': attribute type 4 has an invalid length. [ 1350.728062][ T2141] block nbd1: Possible stuck request ffff888026e40000: control (read@0,1024B). Runtime 330 seconds [ 1350.739172][ T11] block nbd3: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 330 seconds [ 1350.750055][ T2141] block nbd1: Possible stuck request ffff888026e40200: control (read@1024,1024B). Runtime 330 seconds [ 1350.762191][ T11] block nbd3: Possible stuck request ffff888026f00200: control (read@1024,1024B). Runtime 330 seconds [ 1350.773936][ T2141] block nbd1: Possible stuck request ffff888026e40400: control (read@2048,1024B). Runtime 330 seconds [ 1350.785179][ T11] block nbd3: Possible stuck request ffff888026f00400: control (read@2048,1024B). Runtime 330 seconds [ 1350.796813][ T2141] block nbd1: Possible stuck request ffff888026e40600: control (read@3072,1024B). Runtime 330 seconds [ 1350.816221][ T2141] block nbd3: Possible stuck request ffff888026f00600: control (read@3072,1024B). Runtime 330 seconds [ 1350.917318][T24905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.924705][T24905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.932320][T24905] bridge_slave_0: entered allmulticast mode [ 1350.940262][T24905] bridge_slave_0: entered promiscuous mode [ 1350.949463][T24905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.957110][T24905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.965483][T24905] bridge_slave_1: entered allmulticast mode [ 1350.973627][T24905] bridge_slave_1: entered promiscuous mode [ 1351.025250][T24905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.160118][T24905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.218156][T31655] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.345073][T24905] team0: Port device team_slave_0 added [ 1351.392082][T15228] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.436867][T24955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15659'. [ 1351.456074][T24955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15659'. [ 1351.479848][T24905] team0: Port device team_slave_1 added [ 1351.497514][T24955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15659'. [ 1351.560934][T15228] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.684798][T15228] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.708023][T21732] erspan0: left allmulticast mode [ 1351.713852][T21732] erspan0: left promiscuous mode [ 1351.747406][T21732] bridge1: port 1(erspan0) entered disabled state [ 1352.154005][T21732] bridge0 (unregistering): left allmulticast mode [ 1352.246324][ T5142] Bluetooth: hci1: command tx timeout [ 1352.353917][T21732] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1352.366298][T21732] bond0 (unregistering): Released all slaves [ 1352.377644][T21732] bond1 (unregistering): Released all slaves [ 1352.395709][T21732] bond2 (unregistering): Released all slaves [ 1352.413477][T21732] bond3 (unregistering): Released all slaves [ 1352.428907][T21732] bond4 (unregistering): Released all slaves [ 1352.445582][T21732] bond5 (unregistering): Released all slaves [ 1352.463252][T21732] bond6 (unregistering): (slave vxcan1): Releasing backup interface [ 1352.472290][T21732] bond6 (unregistering): Released all slaves [ 1352.485309][T24905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.492676][T24905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.524196][T24905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.538306][T24905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.545441][T24905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.574759][T24905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.829145][T24905] hsr_slave_0: entered promiscuous mode [ 1352.845518][T24905] hsr_slave_1: entered promiscuous mode [ 1352.872395][T24905] debugfs: 'hsr0' already exists in 'hsr' [ 1352.895488][T24905] Cannot create hsr debugfs directory [ 1352.905530][T25004] netlink: 'syz.4.15674': attribute type 4 has an invalid length. [ 1353.334193][T21732] hsr_slave_0: left promiscuous mode [ 1353.345620][T21732] hsr_slave_1: left promiscuous mode [ 1353.359974][T21732] vlan0: left allmulticast mode [ 1353.368445][T21732] veth0_vlan: left allmulticast mode [ 1353.373769][T21732] vlan0: left promiscuous mode [ 1353.386402][T21732] pim6reg (unregistering): left allmulticast mode [ 1353.403528][T21732] team0 (unregistering): Port device wireguard2 removed [ 1353.932628][ T30] INFO: task udevd:9141 blocked for more than 143 seconds. [ 1353.942670][ T30] Not tainted syzkaller #0 [ 1353.948706][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1353.958261][ T30] task:udevd state:D stack:22456 pid:9141 tgid:9141 ppid:5192 task_flags:0x400140 flags:0x00080002 [ 1353.970400][ T30] Call Trace: [ 1353.973742][ T30] [ 1353.976993][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1353.981560][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1353.987226][ T30] ? __pfx___schedule+0x10/0x10 [ 1353.992136][ T30] ? schedule+0x90/0x360 [ 1353.996727][ T30] schedule+0x164/0x360 [ 1354.000933][ T30] io_schedule+0x7f/0xd0 [ 1354.005289][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 1354.026057][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1354.031938][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1354.061534][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1354.071631][ T30] do_read_cache_folio+0x1ad/0x590 [ 1354.078238][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1354.083746][ T30] read_part_sector+0xb6/0x2b0 [ 1354.089080][ T30] adfspart_check_POWERTEC+0x92/0xef0 [ 1354.094575][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1354.101847][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1354.131170][ T30] bdev_disk_changed+0x7ba/0x1550 [ 1354.136897][ T30] ? bdev_open+0xe0/0xd30 [ 1354.142242][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1354.148207][ T30] blkdev_get_whole+0x380/0x510 [ 1354.153085][ T30] bdev_open+0x31e/0xd30 [ 1354.157630][ T30] blkdev_open+0x470/0x610 [ 1354.162261][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1354.167590][ T30] do_dentry_open+0x785/0x14e0 [ 1354.172398][ T30] vfs_open+0x3b/0x340 [ 1354.176595][ T30] ? path_openat+0x2df0/0x3860 [ 1354.181547][ T30] path_openat+0x2e08/0x3860 [ 1354.186286][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1354.191682][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1354.197329][ T30] ? __pfx_path_openat+0x10/0x10 [ 1354.202279][ T30] ? __x64_sys_openat+0x138/0x170 [ 1354.207492][ T30] ? do_syscall_64+0x14d/0xf80 [ 1354.212272][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.218687][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1354.223631][ T30] do_file_open+0x23e/0x4a0 [ 1354.228268][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1354.233314][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1354.238470][ T30] ? alloc_fd+0x64b/0x6c0 [ 1354.243300][ T30] do_sys_openat2+0x113/0x200 [ 1354.248765][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1354.254258][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.259619][ T30] ? rcu_is_watching+0x15/0xb0 [ 1354.264408][ T30] __x64_sys_openat+0x138/0x170 [ 1354.269412][ T30] do_syscall_64+0x14d/0xf80 [ 1354.274017][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.280297][ T30] ? clear_bhb_loop+0x40/0x90 [ 1354.284987][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.291071][ T30] RIP: 0033:0x7fc5acca7407 [ 1354.295500][ T30] RSP: 002b:00007ffdea4cc140 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1354.304043][ T30] RAX: ffffffffffffffda RBX: 00007fc5ad446880 RCX: 00007fc5acca7407 [ 1354.312103][ T30] RDX: 00000000000a0800 RSI: 000055b0b6131540 RDI: ffffffffffffff9c [ 1354.320326][ T30] RBP: 000055b0b611a910 R08: 0000000000000000 R09: 0000000000000000 [ 1354.328844][ T5142] Bluetooth: hci1: command tx timeout [ 1354.334298][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b0b6137f10 [ 1354.342446][ T30] R13: 000055b0b6128190 R14: 0000000000000000 R15: 000055b0b6137f10 [ 1354.350971][ T30] [ 1354.354005][ T30] INFO: task udevd:9144 blocked for more than 143 seconds. [ 1354.361540][ T30] Not tainted syzkaller #0 [ 1354.367373][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1354.376152][ T30] task:udevd state:D stack:22496 pid:9144 tgid:9144 ppid:5192 task_flags:0x400140 flags:0x00080002 [ 1354.388216][ T30] Call Trace: [ 1354.391508][ T30] [ 1354.394443][ T30] __schedule+0x15dd/0x52d0 [ 1354.399158][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1354.404144][ T30] ? __pfx___schedule+0x10/0x10 [ 1354.409603][ T30] ? schedule+0x90/0x360 [ 1354.413859][ T30] schedule+0x164/0x360 [ 1354.418218][ T30] io_schedule+0x7f/0xd0 [ 1354.422475][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 1354.427942][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1354.433787][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1354.439509][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1354.445247][ T30] do_read_cache_folio+0x1ad/0x590 [ 1354.451295][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1354.456909][ T30] read_part_sector+0xb6/0x2b0 [ 1354.461696][ T30] adfspart_check_POWERTEC+0x92/0xef0 [ 1354.467385][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1354.472960][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1354.479115][ T30] bdev_disk_changed+0x7ba/0x1550 [ 1354.484170][ T30] ? bdev_open+0xe0/0xd30 [ 1354.488684][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1354.494276][ T30] blkdev_get_whole+0x380/0x510 [ 1354.499279][ T30] bdev_open+0x31e/0xd30 [ 1354.503549][ T30] blkdev_open+0x470/0x610 [ 1354.508342][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1354.513321][ T30] do_dentry_open+0x785/0x14e0 [ 1354.518242][ T30] vfs_open+0x3b/0x340 [ 1354.522330][ T30] ? path_openat+0x2df0/0x3860 [ 1354.527244][ T30] path_openat+0x2e08/0x3860 [ 1354.532031][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1354.537531][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1354.543111][ T30] ? __pfx_path_openat+0x10/0x10 [ 1354.548185][ T30] ? __x64_sys_openat+0x138/0x170 [ 1354.553636][ T30] ? do_syscall_64+0x14d/0xf80 [ 1354.558575][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.564673][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1354.573329][ T30] do_file_open+0x23e/0x4a0 [ 1354.578086][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1354.583181][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1354.588169][ T30] ? alloc_fd+0x64b/0x6c0 [ 1354.592541][ T30] do_sys_openat2+0x113/0x200 [ 1354.597375][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.602604][ T30] ? exc_page_fault+0x6a/0xc0 [ 1354.607433][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 1354.612741][ T30] __x64_sys_openat+0x138/0x170 [ 1354.617688][ T30] do_syscall_64+0x14d/0xf80 [ 1354.622289][ T30] ? trace_irq_disable+0x3b/0x150 [ 1354.627440][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.633517][ T30] ? clear_bhb_loop+0x40/0x90 [ 1354.638353][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.644340][ T30] RIP: 0033:0x7fc5acca7407 [ 1354.648858][ T30] RSP: 002b:00007ffdea4cc140 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1354.657968][ T30] RAX: ffffffffffffffda RBX: 00007fc5ad446880 RCX: 00007fc5acca7407 [ 1354.666218][ T30] RDX: 00000000000a0800 RSI: 000055b0b611b480 RDI: ffffffffffffff9c [ 1354.674200][ T30] RBP: 000055b0b611a910 R08: 0000000000000000 R09: 0000000000000000 [ 1354.682315][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b0b6145a20 [ 1354.690466][ T30] R13: 000055b0b6128190 R14: 0000000000000000 R15: 000055b0b6145a20 [ 1354.698576][ T30] [ 1354.701720][ T30] [ 1354.701720][ T30] Showing all locks held in the system: [ 1354.709654][ T30] 1 lock held by khungtaskd/30: [ 1354.714532][ T30] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1354.726622][ T30] 3 locks held by kworker/u8:2/35: [ 1354.731768][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1354.743672][ T30] #1: ffffc90000ab7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1354.755324][ T30] #2: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1354.764523][ T30] 1 lock held by klogd/5181: [ 1354.769188][ T30] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1354.779692][ T30] 1 lock held by dhcpcd/5487: [ 1354.784377][ T30] #0: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 1354.793615][ T30] 2 locks held by getty/5574: [ 1354.798491][ T30] #0: ffff8880334bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1354.808448][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1354.818737][ T30] 5 locks held by kworker/u8:3/21732: [ 1354.824119][ T30] #0: ffff88801bade948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1354.835109][ T30] #1: ffffc90005177c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1354.845829][ T30] #2: ffffffff8fbc0990 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1354.855180][ T30] #3: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 1354.865919][ T30] #4: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1354.877129][ T30] 1 lock held by udevd/9141: [ 1354.882204][ T30] #0: ffff888026d71358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1354.891768][ T30] 1 lock held by udevd/9144: [ 1354.896528][ T30] #0: ffff888026e71358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1354.906186][ T30] 2 locks held by syz-executor/24905: [ 1354.911568][ T30] #0: ffffffff8f303328 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1354.921203][ T30] #1: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1354.930396][ T30] 3 locks held by syz.3.15682/25040: [ 1354.935669][ T30] #0: ffffffff8fc3ceb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1354.944107][ T30] #1: ffffffff8fc3ccc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1354.953229][ T30] #2: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x30fb/0x4200 [ 1354.963747][ T30] 2 locks held by syz.4.15683/25045: [ 1354.969350][ T30] #0: ffffffff8fc3ceb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1354.977895][ T30] #1: ffffffff8fc3ccc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1354.987063][ T30] 1 lock held by syz.1.15684/25038: [ 1354.992288][ T30] #0: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1355.001940][ T30] 1 lock held by syz.1.15684/25043: [ 1355.007272][ T30] #0: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1355.016596][ T30] 1 lock held by syz.1.15684/25048: [ 1355.021923][ T30] #0: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1355.031446][ T30] 1 lock held by syz.1.15684/25052: [ 1355.036788][ T30] #0: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1355.045619][ T30] 2 locks held by syz.1.15684/25056: [ 1355.051124][ T30] #0: ffff888055e986f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1355.064166][ T30] #1: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1355.073089][ T30] 1 lock held by syz.2.15685/25063: [ 1355.078369][ T30] #0: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x12e/0xff0 [ 1355.088167][ T30] 1 lock held by syz.2.15685/25066: [ 1355.093389][ T30] #0: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x12e/0xff0 [ 1355.103306][ T30] [ 1355.105649][ T30] ============================================= [ 1355.105649][ T30] [ 1355.120691][ T30] NMI backtrace for cpu 0 [ 1355.120711][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1355.120729][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1355.120740][ T30] Call Trace: [ 1355.120747][ T30] [ 1355.120756][ T30] dump_stack_lvl+0xe8/0x150 [ 1355.120786][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1355.120812][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1355.120836][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1355.120871][ T30] sys_info+0x135/0x170 [ 1355.120893][ T30] watchdog+0xfd9/0x1030 [ 1355.120913][ T30] ? watchdog+0x21a/0x1030 [ 1355.120936][ T30] kthread+0x388/0x470 [ 1355.120954][ T30] ? __pfx_watchdog+0x10/0x10 [ 1355.120967][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.120984][ T30] ret_from_fork+0x51e/0xb90 [ 1355.121008][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.121028][ T30] ? __switch_to+0xc7d/0x1450 [ 1355.121050][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.121067][ T30] ret_from_fork_asm+0x1a/0x30 [ 1355.121105][ T30] [ 1355.121112][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1355.234130][ C1] NMI backtrace for cpu 1 [ 1355.234146][ C1] CPU: 1 UID: 0 PID: 14149 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 1355.234164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1355.234175][ C1] Workqueue: events free_obj_work [ 1355.234202][ C1] RIP: 0010:__lock_acquire+0x6d5/0x2cf0 [ 1355.234225][ C1] Code: ba 08 00 00 00 e8 6b 44 00 00 31 ed 85 c0 0f 84 6d 0d 00 00 83 3d ea 3e 86 18 00 75 13 48 63 44 24 18 48 0f a3 05 fb ae 82 12 <0f> 83 8a 1e 00 00 49 8b 9e 48 0b 00 00 48 83 7c 24 28 00 75 19 83 [ 1355.234238][ C1] RSP: 0018:ffffc9000d47f358 EFLAGS: 00000047 [ 1355.234251][ C1] RAX: 0000000000000007 RBX: ffff88801db30bc8 RCX: ffffffff93c54988 [ 1355.234262][ C1] RDX: 0000000000000008 RSI: ffff88801db30ba8 RDI: ffff88801db30000 [ 1355.234273][ C1] RBP: 0000000000000000 R08: ffffffff81767e95 R09: ffffffff8e75e620 [ 1355.234284][ C1] R10: ffffc9000d47f638 R11: ffffffff81b0cfd0 R12: 00000000ffffff05 [ 1355.234295][ C1] R13: ffff88801db30ba8 R14: ffff88801db30000 R15: 0000000000000002 [ 1355.234306][ C1] FS: 0000000000000000(0000) GS:ffff888125559000(0000) knlGS:0000000000000000 [ 1355.234319][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1355.234330][ C1] CR2: 0000556058fa3ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1355.234345][ C1] Call Trace: [ 1355.234351][ C1] [ 1355.234363][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1355.234385][ C1] ? unwind_next_frame+0x1aaf/0x23c0 [ 1355.234409][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1355.234432][ C1] lock_acquire+0xf0/0x2e0 [ 1355.234449][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1355.234472][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1355.234491][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1355.234509][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1355.234529][ C1] unwind_next_frame+0xc2/0x23c0 [ 1355.234549][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1355.234572][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1355.234592][ C1] ? kasan_save_free_info+0x46/0x50 [ 1355.234612][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1355.234629][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1355.234645][ C1] arch_stack_walk+0x11b/0x150 [ 1355.234670][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1355.234688][ C1] stack_trace_save+0xa9/0x100 [ 1355.234703][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1355.234719][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1355.234742][ C1] kasan_save_track+0x3e/0x80 [ 1355.234762][ C1] ? kasan_save_track+0x3e/0x80 [ 1355.234777][ C1] ? kasan_save_free_info+0x46/0x50 [ 1355.234797][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1355.234831][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1355.234847][ C1] kasan_save_free_info+0x46/0x50 [ 1355.234868][ C1] __kasan_slab_free+0x5c/0x80 [ 1355.234884][ C1] kmem_cache_free+0x187/0x630 [ 1355.234900][ C1] ? free_obj_work+0x391/0x4c0 [ 1355.234920][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1355.234939][ C1] free_obj_work+0x391/0x4c0 [ 1355.234961][ C1] ? __pfx_free_obj_work+0x10/0x10 [ 1355.234983][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1355.235001][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1355.235025][ C1] process_scheduled_works+0xb6e/0x18c0 [ 1355.235055][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1355.235076][ C1] ? assign_work+0x3d5/0x5e0 [ 1355.235096][ C1] worker_thread+0xa53/0xfc0 [ 1355.235125][ C1] kthread+0x388/0x470 [ 1355.235140][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1355.235157][ C1] ? __pfx_kthread+0x10/0x10 [ 1355.235172][ C1] ret_from_fork+0x51e/0xb90 [ 1355.235192][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.235209][ C1] ? __switch_to+0xc7d/0x1450 [ 1355.235228][ C1] ? __pfx_kthread+0x10/0x10 [ 1355.235242][ C1] ret_from_fork_asm+0x1a/0x30 [ 1355.235270][ C1] [ 1355.236667][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1355.236689][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1355.236710][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1355.236721][ T30] Call Trace: [ 1355.236730][ T30] [ 1355.236739][ T30] vpanic+0x56c/0xa60 [ 1355.236775][ T30] ? __pfx___schedule+0x10/0x10 [ 1355.236798][ T30] ? __pfx_vpanic+0x10/0x10 [ 1355.236829][ T30] panic+0xc5/0xd0 [ 1355.236852][ T30] ? __pfx_panic+0x10/0x10 [ 1355.236878][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1355.236903][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1355.236933][ T30] watchdog+0x1023/0x1030 [ 1355.236956][ T30] ? watchdog+0x21a/0x1030 [ 1355.236980][ T30] kthread+0x388/0x470 [ 1355.236999][ T30] ? __pfx_watchdog+0x10/0x10 [ 1355.237013][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.237033][ T30] ret_from_fork+0x51e/0xb90 [ 1355.237058][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.237080][ T30] ? __switch_to+0xc7d/0x1450 [ 1355.237105][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.237124][ T30] ret_from_fork_asm+0x1a/0x30 [ 1355.237163][ T30] [ 1355.708291][ T30] Kernel Offset: disabled [ 1355.712601][ T30] Rebooting in 86400 seconds..